last executing test programs: 1m4.774678936s ago: executing program 1 (id=493): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffb, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2}, 0x50) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) write$tun(r0, &(0x7f0000001280)=ANY=[@ANYBLOB="000086dd0000110005000000a60c6b63851e0f98"], 0xfce) 1m4.651483854s ago: executing program 1 (id=494): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020080ffffff18000000fffffffe00000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0xfffffffffffff1d2) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x10000000}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/infiniband_srp/srp-syz0-1/add_target\x00', 0x1, 0x0) write(r4, &(0x7f0000000240)='id_ext=0,ioc_guid=0,dest=0.0.0.0:3260\x00', 0x25) 1m4.16984056s ago: executing program 1 (id=497): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020080ffffff18000000fffffffe00000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0xfffffffffffff1d2) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20005841}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x10000000}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/infiniband_srp/srp-syz0-1/add_target\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='id_ext=0,ioc_guid=0,dest=0.0.0.0:3260\x00', 0x25) 1m3.661132802s ago: executing program 1 (id=499): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x165) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='dummy_udc.0\n\x00', 0xc) poll(0x0, 0x0, 0x1f4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x200008, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000a00)={0x0, 0x0}, 0x8) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="33082788beb88526ea2ea7e2926855062547e4910f40e409dbe7ee55522fcd9913a25103d76c0f8e5d5b251dd3b2531e2898f6fdfd0bfbc45ecd1f809cb7c6f4e8513817403b79e19b0c21f86ed4486ab848c210fddf113e8f3322585aa8b17d66a3168cf8264c6cfb69dabd371439b732d686080cd3ea75689b5c0ea2761a883ae13c00"/146], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x20000001) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000040c0)="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", 0x2000, 0x0) 1m1.461614383s ago: executing program 1 (id=508): r0 = syz_usb_connect(0x5, 0x46, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000e75f9208c0070515c5b8010203010902340001000080000904ba00038e4ee2000905000000041a06010905010300001007c109050c044000"], 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000000005"], 0x48) r1 = io_uring_setup(0x3eae, &(0x7f0000000200)={0x0, 0xffffffff, 0x0, 0x0, 0x29c}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff15, 0x10, &(0x7f0000000000), 0xf000000}, 0x48) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)=@bridge_getvlan={0x17, 0x72, 0x601}, 0x18}}, 0x0) syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ublk_ctrl(0xffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$UBLK_U_CMD_START_USER_RECOVERY(0xffffffffffffffff, 0xc0207510, &(0x7f00000003c0)) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00') fchdir(r3) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000002840)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x8) getsockopt$sock_buf(r4, 0x1, 0x1a, 0x0, &(0x7f0000000200)) r5 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) pselect6(0x7fff, &(0x7f0000000000)={0x8, 0x0, 0x0, 0x300}, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 59.560944281s ago: executing program 1 (id=511): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020080ffffff18000000fffffffe00000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0xfffffffffffff1d2) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20005841}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x10000000}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/infiniband_srp/srp-syz0-1/add_target\x00', 0x1, 0x0) write(r4, &(0x7f0000000240)='id_ext=0,ioc_guid=0,dest=0.0.0.0:3260\x00', 0x25) 59.435577454s ago: executing program 32 (id=511): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020080ffffff18000000fffffffe00000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0xfffffffffffff1d2) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20005841}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x10000000}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/infiniband_srp/srp-syz0-1/add_target\x00', 0x1, 0x0) write(r4, &(0x7f0000000240)='id_ext=0,ioc_guid=0,dest=0.0.0.0:3260\x00', 0x25) 7.062043892s ago: executing program 2 (id=714): socketpair$unix(0x1, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r0 = epoll_create(0x1) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0xe45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x8, 0x9, 0x0, 0x600, 0x80, 0x89, 0x8, 0x8, 0x8d], 0x100000, 0x240246}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) close(0x3) (fail_nth: 2) 6.835432691s ago: executing program 0 (id=716): lsetxattr(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x20000000, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r9, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) 5.201629089s ago: executing program 2 (id=717): socketpair$unix(0x1, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r0 = epoll_create(0x1) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0xe45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x8, 0x9, 0x0, 0x600, 0x80, 0x89, 0x8, 0x8, 0x8d], 0x100000, 0x240246}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) close(0x3) 5.200896133s ago: executing program 0 (id=718): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x2) ioctl$KVM_SET_ONE_REG(r2, 0x4048aecb, &(0x7f0000000040)=@arm64_ccsidr={0x6020000000110009, &(0x7f0000000300)=0xd8}) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc2c45512, &(0x7f0000000640)={{0x4, 0x2, 0x81, 0x5, 'syz1\x00', 0x9}, 0x0, [0x380, 0xe8af, 0x1, 0xcc0, 0xe, 0x101, 0x80, 0xa6da, 0x2, 0x1, 0x9, 0x8, 0xb, 0xfffffff7, 0x8, 0x10, 0x5, 0x4, 0x40f, 0x80, 0x962, 0x2, 0x1, 0x400, 0x7fffffff, 0x9c, 0x80000001, 0x3, 0x60e3, 0xa12, 0x8, 0x10000, 0x7, 0x9, 0x7430, 0x2, 0x5, 0x609, 0x1, 0x3, 0x6, 0x5, 0x8001, 0x8, 0x9, 0x1, 0x1, 0x0, 0xffff1688, 0x2, 0x0, 0x4, 0x1000, 0xe93, 0x4, 0x7ff, 0x7, 0x6, 0x50a, 0x0, 0x6, 0x7ff, 0x1000, 0xffffffff, 0x4, 0x800005, 0x7a, 0x2, 0xd, 0x2, 0x3, 0x7, 0xac, 0x7, 0x7, 0x4, 0x8000, 0x9, 0x4, 0x7, 0xd, 0x7, 0x7, 0x0, 0x0, 0x40, 0x2, 0x8000, 0xfff, 0x3, 0x3b9, 0x6, 0x4, 0x4660917f, 0x487d, 0x8000, 0x1, 0x5, 0x3, 0x0, 0x5, 0x4, 0xe, 0x1, 0x7, 0x9, 0xc, 0x4, 0x9, 0x1, 0x3ce, 0xa, 0x5, 0x9, 0x0, 0x6, 0xfffffff7, 0xffffbf90, 0x0, 0x7, 0x2, 0x0, 0x7, 0x80000000, 0x809, 0xc960, 0x73938332, 0x7763]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f00000001c0)=ANY=[@ANYRES16=r3], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0x69) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000000)={{@my=0x1}, @my=0x1, 0x0, 0x0, 0x421}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000080)={{@hyper, 0x2}, @any, 0x0, 0x0, 0x2, 0x6, 0x9a6, 0x8, 0x8}) r6 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) pwrite64(r6, &(0x7f0000000180)="e67ab166972ce298f4681ef5e755f60473b1dd904bf7ccc3fe0234cf3e2c9b5958bc69f6c3c5238bebfb8687365029d64c37ee0aec2d13db618f60fdcf8f7765e64d89", 0x43, 0x3) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r5, 0x7a9, &(0x7f00000003c0)={{@any, 0x9}, 0xfff, 0x9, 0x6, 0x10000, 0x80000, 0x80, 0x10000, 0x58e3}) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0b080510"], 0xe) 4.970330818s ago: executing program 0 (id=720): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000100)=[{0x87}, {0x6}]}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"a2e3ad21ed0d09f91b5b090987f70906d038e7ff7fc6e5539b0d3d0e8b089b323b6d07060890e0878f0e1ac6e7049b334a959b3e9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070b07580936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0931a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5bcd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383701d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b6080000007a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39dd0000000039ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb06ffc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00b98e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb15da202d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d877a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d4"]) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents64(r1, &(0x7f0000000000)=""/24, 0x18) getdents64(r1, 0x0, 0x36) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vim2m(&(0x7f0000000040), 0x18000, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 4.869811428s ago: executing program 3 (id=722): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9b0, 0x100800ff, &(0x7f00000010c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305720, &(0x7f00000004c0)={0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r1, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./cifs\x00', 0x1ed) mount(&(0x7f0000000800)=@filename='\\\\::1\\share\x00', &(0x7f0000000300)='./cifs\x00', &(0x7f0000000400)='cifs\x00', 0x0, &(0x7f0000000500)='ip=::1,port=20000,user=root,password=root,vers=3.1.1\x00') 4.661573223s ago: executing program 4 (id=724): r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r0, 0x0, 0xd0, 0x0, &(0x7f0000000080)) socket$igmp(0x2, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./cfg\x00', 0x9e) mount(0x0, &(0x7f0000000080)='./cfg\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./cfg/usb_gadget/g1/os_desc/qw_sign\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f00000008c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = syz_open_dev$swradio(&(0x7f0000000300), 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r4, 0xc0405665, &(0x7f0000000100)={0x2, 0x2, 0x3, 0x0, 0x694}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000002900)={{{@in=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000002a00)=0xe4) write$FUSE_STATX(r1, &(0x7f0000002b00)={0x130, 0x0, r2, {0xce, 0x3, 0x0, '\x00', {0x8000, 0xfffffa04, 0x8000000000000001, 0x4, r5, r3, 0x1000, '\x00', 0x7, 0x7ff, 0x200000000000, 0x6, {0x5, 0x9}, {0x4, 0x6}, {0xffffffffffffffff, 0x3}, {0x6, 0x5}, 0xf, 0x5, 0x802, 0x8000004}}}, 0x130) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) write(r1, &(0x7f0000000280)="75b214", 0x3) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r8, 0x0, 0xcb, &(0x7f0000000040)={0x1, 0x8, 0xc, 0x9, @vifc_lcl_addr=@local, @multicast2}, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r9 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r9, &(0x7f0000000400)={0x2, 0x4e20, @loopback}, 0x10) listen(r9, 0x5) socket$inet_smc(0x2b, 0x1, 0x0) r10 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @mcast2, 0x2}, 0x1c) r11 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r11, &(0x7f0000001200)=[{&(0x7f0000000140)="580000001400add427323b472545b45602117fffffff81004e210e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) io_setup(0x20fe, &(0x7f0000000540)=0x0) io_submit(r12, 0x2, &(0x7f0000000000)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x7ff, r10, 0x0, 0x0, 0x3}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1000, r10, 0xffffffffffffffff, 0x0, 0x200000001, 0x0, 0x2}]) 4.530611746s ago: executing program 4 (id=725): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac000000150a010400000000000000200a0000030909000000797a31000000000900020073797a30000000000900010073797a3100000000730008002f578452008bd7137842e3d514774740d410313dbb9907ea97dd3e5bc186a1a70e563280f435416b06e272b3f744421f7322fa14e594858147fcb6fc2369ab20b52a8d966a2b522d3463458d813c291260943f94ddf787499f26e55dc17b69ad8a9ebb77850cdb74e5bf821101b1ed00"], 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x4c008) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, 0x0, &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x18, 0x1411, 0x1, 0x70bd29, 0x20003, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r3, 0x0, 0x0}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, 0x0, 0x7}, 0x80, 0x0}, 0x4000011) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001400050126bc70006bdbdf2511000d000100c80e4501a254722eaea6d93916f8d66cffe8ef8d00000000"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x54840) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 4.255185186s ago: executing program 2 (id=726): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac000000150a010400000000000000200a0000030909000000797a31000000000900020073797a30000000000900010073797a3100000000730008002f578452008bd7137842e3d514774740d410313dbb9907ea97dd3e5bc186a1a70e563280f435416b06e272b3f744421f7322fa14e594858147fcb6fc2369ab20b52a8d966a2b522d3463458d813c291260943f94ddf787499f26e55dc17b69ad8a9ebb77850cdb74e5bf821101b1ed00"], 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x4c008) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x45, 0x0, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x18, 0x1411, 0x1, 0x70bd29, 0x20003, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r3, 0x0, 0x0}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, 0x0, 0x7}, 0x80, 0x0}, 0x4000011) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001400050126bc70006bdbdf2511000d000100c80e4501a254722eaea6d93916f8d66cffe8ef8d00000000"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x54840) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 3.424609551s ago: executing program 4 (id=727): lsetxattr(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x20000000, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r9, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) 3.206219107s ago: executing program 3 (id=728): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x7a26000) mkdir(&(0x7f00000002c0)='./file0\x00', 0xa0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) io_setup(0x2e, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140)}]) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x2, 0x1, 0x0, 0x3, 0xc, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x7, @mcast1, 0x80000001}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0xff, @local, 0x1ff}}]}, 0x60}, 0x1, 0x7}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0xfffffffffffffffc, 0x1) 3.162139737s ago: executing program 2 (id=729): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x22, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @broadcast}}}}}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000100)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000140)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r3, 0x7b2, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x20912c}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d00000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000007608000000c0000018000000000000000000000000000000950000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(0x0, &(0x7f0000000300)='./file0/file0\x00') r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r4, &(0x7f0000001180)={0x2020, 0x0, 0x0, 0x0}, 0x2020) rename(&(0x7f0000000580)='./file0\x00', 0x0) symlinkat(&(0x7f0000001040)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') mount$nfs(&(0x7f0000000340)=')./.,\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x80000, &(0x7f0000000400)={[{}, {'erspan0\x00'}, {}, {}, {'GPL\x00'}, {'\\@'}], [{@fsuuid={'fsuuid', 0x3d, {[0x63, 0x63, 0x66, 0x30, 0x61, 0x61, 0x63], 0x2d, [0x64, 0xd, 0x63, 0x64], 0x2d, [0x37, 0x1, 0x32, 0x38], 0x2d, [0x39, 0x63, 0x64, 0x35], 0x2d, [0x38, 0x0, 0x37, 0x30, 0x31, 0x33, 0x31, 0x30]}}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@obj_role={'obj_role', 0x3d, ')'}}, {@smackfshat={'smackfshat', 0x3d, 'erspan0\x00'}}, {@appraise_type}, {@euid_eq={'euid', 0x3d, r5}}]}) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x8040) socket$inet_mptcp(0x2, 0x1, 0x106) 2.755281057s ago: executing program 0 (id=730): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x7}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000180)={r1, 0x95, "decf9d49f9cf718864bf7927fe65d910d4d9eee411fff4703f774828ee26f3d8174a56103a36f5fa31dd9e2305ae37e831fda06533c1984ee46f44bc2999b849c64102dee93edc87bbc991150ed20c97a38985f62271973ffbcd9f80278779bf1781404232199415d51a974d4c1d2ebc99fb87994d4aaaa74fa08a989f843ef090112f243bbc3f7d7b5b737025f257d7b58ff9529e"}, &(0x7f0000000240)=0x9d) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000040)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) mkdir(&(0x7f0000000140)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/file0\x00', 0x0) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x7}, &(0x7f00000000c0)=0x8) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000180)={r1, 0x95, "decf9d49f9cf718864bf7927fe65d910d4d9eee411fff4703f774828ee26f3d8174a56103a36f5fa31dd9e2305ae37e831fda06533c1984ee46f44bc2999b849c64102dee93edc87bbc991150ed20c97a38985f62271973ffbcd9f80278779bf1781404232199415d51a974d4c1d2ebc99fb87994d4aaaa74fa08a989f843ef090112f243bbc3f7d7b5b737025f257d7b58ff9529e"}, &(0x7f0000000240)=0x9d) (async) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) (async) mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff) (async) mkdir(&(0x7f0000000040)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) (async) mkdir(&(0x7f0000000140)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/file0\x00', 0x0) (async) 2.651127691s ago: executing program 0 (id=731): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0x9) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x2) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x9) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = openat$udambuf(0xffffff9c, &(0x7f0000000200), 0x2) r3 = memfd_create(&(0x7f0000000240)='\x00', 0x0) r4 = openat$sw_sync_info(0xffffff9c, &(0x7f0000000280), 0x420000, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d8b601020301090212000100000000090401"], 0x0) mkdir(&(0x7f0000000100)='./mnt\x00', 0x1ff) r5 = fsopen(&(0x7f0000000040)='nfs\x00', 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./mnt/bus/i2c/devices/i2c-2/new_device\x00', 0x1, 0x0) write(r6, &(0x7f0000000a00)='stm32g0-typec 0x3', 0x11) r7 = memfd_create(&(0x7f00000002c0)=',{-$-#$%\\\x00', 0x4) ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000005000000", @ANYRES32=r3, @ANYBLOB="00000000000090da15ee30b6cf41000000000000", @ANYRES32=r4, @ANYBLOB="0000000000f0ffffffffffff0000000000000000", @ANYRES32=r1, @ANYBLOB="00000000002000000000000000f0ffff00000000", @ANYRES32=r7, @ANYBLOB="0000000000000000000001000000000000000100", @ANYRES32=r1, @ANYBLOB="0000000000100000000000000030010000000000"]) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r8, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000018000000000000000300000018110000", @ANYRES32=r8, @ANYBLOB="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"], &(0x7f00000007c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000400)=0x7) 2.650332704s ago: executing program 3 (id=732): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0xfffffffffffff1d2) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20005841}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x10000000}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/infiniband_srp/srp-syz0-1/add_target\x00', 0x1, 0x0) write(r4, &(0x7f0000000240)='id_ext=0,ioc_guid=0,dest=0.0.0.0:3260\x00', 0x25) 2.181230277s ago: executing program 3 (id=733): r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r0, 0x0, 0xd0, 0x0, &(0x7f0000000080)) socket$igmp(0x2, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./cfg\x00', 0x9e) mount(0x0, &(0x7f0000000080)='./cfg\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./cfg/usb_gadget/g1/os_desc/qw_sign\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f00000008c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = syz_open_dev$swradio(&(0x7f0000000300), 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r4, 0xc0405665, &(0x7f0000000100)={0x2, 0x2, 0x3, 0x0, 0x694}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000002900)={{{@in=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000002a00)=0xe4) write$FUSE_STATX(r1, &(0x7f0000002b00)={0x130, 0x0, r2, {0xce, 0x3, 0x0, '\x00', {0x8000, 0xfffffa04, 0x8000000000000001, 0x4, r5, r3, 0x1000, '\x00', 0x7, 0x7ff, 0x200000000000, 0x6, {0x5, 0x9}, {0x4, 0x6}, {0xffffffffffffffff, 0x3}, {0x6, 0x5}, 0xf, 0x5, 0x802, 0x8000004}}}, 0x130) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) write(r1, &(0x7f0000000280)="75b214", 0x3) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r8, 0x0, 0xcb, &(0x7f0000000040)={0x1, 0x8, 0xc, 0x9, @vifc_lcl_addr=@local, @multicast2}, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r9 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r9, &(0x7f0000000400)={0x2, 0x4e20, @loopback}, 0x10) listen(r9, 0x5) socket$inet_smc(0x2b, 0x1, 0x0) r10 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @mcast2, 0x2}, 0x1c) r11 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r11, &(0x7f0000001200)=[{&(0x7f0000000140)="580000001400add427323b472545b45602117fffffff81004e210e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) io_setup(0x20fe, &(0x7f0000000540)=0x0) io_submit(r12, 0x2, &(0x7f0000000000)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x7ff, r10, 0x0, 0x0, 0x3}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1000, r10, 0xffffffffffffffff, 0x0, 0x200000001, 0x0, 0x2}]) 1.97382937s ago: executing program 0 (id=734): r0 = syz_usb_connect(0x5, 0x46, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000e75f9208c0070515c5b8010203010902340001000080000904ba00038e4ee2000905000000041a06010905010300001007c109050c04400006030f07059acbf5"], 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = io_uring_setup(0x3eae, &(0x7f0000000200)={0x0, 0xffffffff, 0x0, 0x0, 0x29c}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff15, 0x10, &(0x7f0000000000), 0xf000000}, 0x48) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)=@bridge_getvlan={0x17, 0x72, 0x601}, 0x18}}, 0x0) syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ublk_ctrl(0xffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$UBLK_U_CMD_START_USER_RECOVERY(0xffffffffffffffff, 0xc0207510, &(0x7f00000003c0)) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00') fchdir(r3) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000002840)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x8) getsockopt$sock_buf(r4, 0x1, 0x1a, 0x0, &(0x7f0000000200)) r5 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) pselect6(0x7fff, &(0x7f0000000000)={0x8, 0x0, 0x0, 0x300}, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 1.256226743s ago: executing program 2 (id=735): r0 = openat$autofs(0xffffff9c, &(0x7f0000000000), 0x80001, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0/file0\x00'}) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) io_setup(0x200, &(0x7f00000010c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0xfffe, r2, 0x0, 0x0, 0x0, 0x0, 0x2, r2}]) mkdir(0x0, 0x1ff) mount(0x0, &(0x7f0000000200)='proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x4000000) setrlimit(0x0, &(0x7f0000000980)={0x0, 0x62}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000600a8000600200002400700027c035c0461c1d67f6f94007134cf6efb807ca007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x4000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) r7 = openat(r1, &(0x7f0000000400)='proc/kallsyms\x00', 0x0, 0x0) lseek(r7, 0x186a0, 0x0) lseek(r7, 0x249f0, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r8, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x375) 1.157708733s ago: executing program 4 (id=736): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000200)={0x0, 0x2, 0x7, 0x1, &(0x7f00000002c0)=[{0x9, 0xff30, 0x3, 0x7}]}) 1.157323031s ago: executing program 3 (id=737): r0 = socket$inet(0x2, 0x3, 0xd) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x7, 0x0, 0x0, 0xfffffffb}]}) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, 0x0, &(0x7f0000000040)) 1.051309585s ago: executing program 4 (id=738): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x7a26000) mkdir(&(0x7f00000002c0)='./file0\x00', 0xa0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) io_setup(0x2e, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 907.974134ms ago: executing program 3 (id=739): r0 = gettid() openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="020300090a0000000000000000000000030006000000000002000000fd1414000000000000000000020001000000000000000002fffffffb030005000000000002000000000000000000000000000000c9cb8c463843f41976dfe9fe674d72b1fd3f90a3d417b1043a198ee752902e387d77b0c946c68cf54ed8ac16eb829e0150961673ca881301d3a9ec003e233673d83a2061ad18146cc39c5e59cd1910912dd907bf2251dd5d78fd7354b5f194483ef0db04df"], 0x50}}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x12}, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$key(r1, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES64=r0], 0x10}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r4 = socket$inet6_udp(0xa, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x2) fsopen(0x0, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2c41, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x0, 0xff, 0x8, 0x1, 0x2}, 0x20) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/gser.usb0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f00000004c0)="dd2ac7a476835c711b45a013dadf5c6012048704b0c5563c154e0b4c83c6749dcf8faa895b1308fc7d74e51d41aa6b00d17c1a9361de6b4799bb5a1ee925045fa0f2fa51077e192eb20440434627", 0x8) r6 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r6, &(0x7f0000000400)='\n', 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 93.2212ms ago: executing program 2 (id=740): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000006100010026bd7000fcdbdf250400000017ee81bea9f88a8ea3fd7025ac9a56bfc27d09eccd112f04dc477537177fe26a08609e7925bcc1aefc9bc0a057caa254f699ee62484eb983b6bb29c2b24fce6131775d2b5c92c6ee355cd909ab625b1acf759370d1c40235b49ba685d94df53f34b61b1c27cbeb107e0a97696e61ff640b3279903e991c1908ee0139bcbbde49c7904e86f409e809767456e8de59e8014a6842797e5eca7e4f8fdfb1ece466332f1d3199c9b13c5fb42e288b7d8a8f5e5fd5718cec"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r1 = socket$inet(0x2, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000100)='./sys/bus/nd/devices/pfn0.0/mode\x00', 0x43, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000180)=0x1f, 0x4) write(r2, &(0x7f0000000140)='namespace0.0', 0xc) close(r2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/nd/devices/pfn0.0/mode\x00', 0x1, 0x0) write(r4, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/nd/devices/pfn0.0/uuid\x00', 0x1, 0x0) write(r5, &(0x7f0000000240)='46618451-8636-4076-a006-25816b8ff40c', 0x24) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/nd/devices/pfn0.0/namespace\x00', 0x1, 0x0) symlinkat(&(0x7f0000000280)='./sys/bus/nd/devices/pfn0.0/namespace\x00', 0xffffffffffffffff, &(0x7f00000002c0)='./sys/bus/nd/devices/pfn0.0/mode\x00') sendmsg$nl_generic(r5, &(0x7f0000002d40)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002d00)={&(0x7f0000001c80)=ANY=[@ANYBLOB="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"], 0x1078}, 0x1, 0x0, 0x0, 0x4000000}, 0x240080c0) write(r6, &(0x7f0000000340)='namespace0.0', 0xc) r7 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/nd/drivers/nd_pmem/bind\x00', 0x1, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000001c40)=0x4) ioctl$PPPIOCSMAXCID(r8, 0x40047451, &(0x7f0000000500)=0xffff0080) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff}, 0x80) r10 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000440)="f8c76b9d2ee8d8276324487a1b4165474b41e214a07fc6b482382472abed5f64fa93abaefe452e53e54f96192b3d3982280186147fe9d6ffe45967d74e7b50a54cf42c5839ec86b49341fdb8", 0xfffffffffffffdae, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r10, r9, 0x0) keyctl$invalidate(0x15, r10) ioctl$PPPIOCSMAXCID(r8, 0x40047451, &(0x7f0000000000)=0x3) write(r7, &(0x7f00000003c0)='pfn0.0', 0x6) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) 0s ago: executing program 4 (id=741): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0xfffffffffffffef3, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000001cc0), 0x800, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r3, 0x80044d06, &(0x7f0000002180)) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) r5 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, &(0x7f0000000240)=0x4}) r9 = socket(0x2, 0x3, 0x6) sendmmsg$unix(r9, &(0x7f0000000bc0)=[{{&(0x7f0000002140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f0000000700)=[@cred={{0x18, 0x1, 0x2, {r5}}}], 0x18}}], 0x1, 0x800) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="03c8007614bffd076773e618d39a90a7ddede0f1cbbfb5400507109f248002f538054f1d79f119c666d26733442cafd720bdb2541415da118792c9c7d00058719ec0f92263e2739da7bc6b092a07f4122aea955b70195af1efcdf25f4a45cf1e36245c76d420b0a64fd997374c6ac536273d1c80341fe913eb46"], 0x7a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0100001800010029bd7001fddbdf251d0104001e010600010e0301ff71ec6d721744cd5200080000f8cfcad4c4ec6511ec028c5028564abce83afe14c93e15e556c2baed7f897fe841c155a2b2a4b9f3052995cdf66a9c7922ff0300005b6c67281f1519cd7c32c2bf7563b9452575505da99ea128d37616896be8764a2c78edbad5bde7a5e405bdc893770338925f824bd24689c0d11a5568fc3aaa9ad0d7766d8ea8d3bf1006e3df494e2f373148ecb4adafdd39874e9808b118301f1e76054a64c6d243523f5de7b347f3b740e105d0ed18fae7289835301ebd8949268090b3bcd4cbed5f1cfe93cff41a963080953a8abaafa1f121e590f74e28233f4129d4587eee87ec5d42c3ef0619022c005c8d586b2a88d818b56d2a5e15c8a95d29e5b2ea0000150003000100006008000000a38c26ec238c425902000000d0835a787c3280fb7f6a6d2bd7387277da8c8925d6a1107a2148c5635061490b9d7c9ba1f316"], 0x14c}}, 0x4884) kernel console output (not intermixed with test programs): descriptor read/64, error -71 [ 100.193409][ T6685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.278544][ T850] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 100.398730][ T10] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 100.407442][ T6696] FAULT_INJECTION: forcing a failure. [ 100.407442][ T6696] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.413676][ T6696] CPU: 0 UID: 0 PID: 6696 Comm: syz.1.237 Not tainted syzkaller #0 PREEMPT(full) [ 100.413700][ T6696] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.413712][ T6696] Call Trace: [ 100.413718][ T6696] [ 100.413725][ T6696] dump_stack_lvl+0x100/0x190 [ 100.413755][ T6696] should_fail_ex.cold+0x5/0xa [ 100.413777][ T6696] _copy_to_user+0x32/0xd0 [ 100.413807][ T6696] simple_read_from_buffer+0xcb/0x170 [ 100.413841][ T6696] proc_fail_nth_read+0x1af/0x230 [ 100.413869][ T6696] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 100.413895][ T6696] ? rw_verify_area+0xce/0x6d0 [ 100.413921][ T6696] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 100.413953][ T6696] vfs_read+0x1e4/0xb40 [ 100.413973][ T6696] ? __pfx_vfs_read+0x10/0x10 [ 100.413988][ T6696] ? find_held_lock+0x2b/0x80 [ 100.414013][ T6696] ? __fget_files+0x215/0x3d0 [ 100.414035][ T6696] ? __fget_files+0x21f/0x3d0 [ 100.414059][ T6696] ksys_read+0x12a/0x250 [ 100.414076][ T6696] ? __pfx_ksys_read+0x10/0x10 [ 100.414100][ T6696] do_int80_emulation+0x14b/0x720 [ 100.414158][ T6696] asm_int80_emulation+0x1a/0x20 [ 100.414178][ T6696] RIP: 0023:0xf71674eb [ 100.414194][ T6696] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 100.414210][ T6696] RSP: 002b:00000000f541d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 100.414230][ T6696] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f541d5d0 [ 100.414242][ T6696] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 100.414251][ T6696] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 100.414260][ T6696] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 100.414270][ T6696] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 100.414293][ T6696] [ 100.480430][ T850] usb 7-1: Using ep0 maxpacket: 8 [ 100.483881][ T850] usb 7-1: config 0 has an invalid interface number: 186 but max is 0 [ 100.486858][ T850] usb 7-1: config 0 has no interface number 0 [ 100.489298][ T850] usb 7-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 100.492709][ T850] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 100.495864][ T850] usb 7-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 100.499751][ T850] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 100.503394][ T850] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 100.506740][ T850] usb 7-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 100.513881][ T850] usb 7-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 100.516836][ T850] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.519548][ T850] usb 7-1: Product: syz [ 100.519558][ T850] usb 7-1: Manufacturer: syz [ 100.519566][ T850] usb 7-1: SerialNumber: syz [ 100.521409][ T850] usb 7-1: config 0 descriptor?? [ 100.538353][ T10] usb 8-1: device descriptor read/64, error -71 [ 100.648573][ T10] usb usb8-port1: attempt power cycle [ 100.741387][ T850] iowarrior 7-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 100.816355][ T6702] syz0: rxe_newlink: already configured on bond_slave_1 [ 100.944028][ T5825] usb 7-1: USB disconnect, device number 11 [ 100.988325][ T10] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 101.008892][ T10] usb 8-1: device descriptor read/8, error -71 [ 101.248385][ T10] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 101.269383][ T10] usb 8-1: device descriptor read/8, error -71 [ 101.379801][ T10] usb usb8-port1: unable to enumerate USB device [ 102.107853][ T6714] 9pnet_virtio: no channels available for device syz [ 102.414022][ T6725] netlink: 'syz.2.250': attribute type 21 has an invalid length. [ 102.416627][ T6725] netlink: 128 bytes leftover after parsing attributes in process `syz.2.250'. [ 102.420181][ T6725] netlink: 3 bytes leftover after parsing attributes in process `syz.2.250'. [ 102.976480][ T6729] siw: device registration error -23 [ 103.620834][ T6735] input: syz0 as /devices/virtual/input/input7 [ 103.976448][ T6744] siw: device registration error -23 [ 105.250934][ T6762] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 105.830540][ T60] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 105.960939][ T6767] siw: device registration error -23 [ 105.968324][ T60] usb 7-1: device descriptor read/64, error -71 [ 106.208393][ T60] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 106.341508][ T60] usb 7-1: device descriptor read/64, error -71 [ 106.449970][ T60] usb usb7-port1: attempt power cycle [ 106.638394][ T5825] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 106.790073][ T5825] usb 6-1: Using ep0 maxpacket: 32 [ 106.792484][ T60] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 106.797762][ T5825] usb 6-1: config 0 has an invalid interface number: 119 but max is 0 [ 106.801212][ T5825] usb 6-1: config 0 has no interface number 0 [ 106.803287][ T5825] usb 6-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 106.806935][ T5825] usb 6-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 106.811519][ T5825] usb 6-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 106.814744][ T60] usb 7-1: device descriptor read/8, error -71 [ 106.816759][ T5825] usb 6-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 106.822983][ T5825] usb 6-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 106.825865][ T5825] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.828654][ T5825] usb 6-1: Product: syz [ 106.829997][ T5825] usb 6-1: Manufacturer: syz [ 106.831744][ T5825] usb 6-1: SerialNumber: syz [ 106.834612][ T5825] usb 6-1: config 0 descriptor?? [ 106.839237][ T6772] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 106.845017][ T5825] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.119/input/input8 [ 106.851473][ T5124] usb 6-1: BOGUS urb xfer, pipe 1 != type 3 [ 107.048394][ T60] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 107.062496][ T5825] usb 6-1: USB disconnect, device number 8 [ 107.071440][ T60] usb 7-1: device descriptor read/8, error -71 [ 107.178644][ T60] usb usb7-port1: unable to enumerate USB device [ 107.458433][ T6763] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 107.539057][ T6774] netlink: 'syz.3.268': attribute type 21 has an invalid length. [ 107.542766][ T6774] netlink: 128 bytes leftover after parsing attributes in process `syz.3.268'. [ 107.546557][ T6774] netlink: 3 bytes leftover after parsing attributes in process `syz.3.268'. [ 107.795589][ T6780] scsi host6: ib_srp: Connection 0/4 to 0.0.0.0 failed [ 108.450811][ T6792] scsi host6: ib_srp: Connection 0/4 to 0.0.0.0 failed [ 108.582572][ T6798] mmap: syz.3.276 (6798) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 108.679944][ T6801] option changes via remount are deprecated (pid=6800 comm=syz.1.277) [ 108.718424][ T6806] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.773043][ T6810] netlink: 'syz.0.280': attribute type 1 has an invalid length. [ 108.786582][ T6810] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.839740][ T6810] bond1: (slave veth5): Enslaving as an active interface with a down link [ 108.876111][ T6810] netlink: 28 bytes leftover after parsing attributes in process `syz.0.280'. [ 108.890689][ T6810] netlink: 28 bytes leftover after parsing attributes in process `syz.0.280'. [ 108.894984][ T6810] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.948869][ T6814] netlink: 'syz.0.281': attribute type 21 has an invalid length. [ 108.952439][ T6814] netlink: 128 bytes leftover after parsing attributes in process `syz.0.281'. [ 108.956291][ T6814] netlink: 3 bytes leftover after parsing attributes in process `syz.0.281'. [ 109.029786][ T29] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 109.198366][ T29] usb 7-1: Using ep0 maxpacket: 32 [ 109.209496][ T29] usb 7-1: config 0 has an invalid interface number: 119 but max is 0 [ 109.213028][ T29] usb 7-1: config 0 has no interface number 0 [ 109.215294][ T29] usb 7-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 109.219081][ T29] usb 7-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 109.223085][ T29] usb 7-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 109.226365][ T29] usb 7-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 109.239188][ T29] usb 7-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 109.242721][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.245521][ T29] usb 7-1: Product: syz [ 109.247095][ T29] usb 7-1: Manufacturer: syz [ 109.249582][ T29] usb 7-1: SerialNumber: syz [ 109.268515][ T29] usb 7-1: config 0 descriptor?? [ 109.273655][ T6803] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 109.297166][ T29] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.119/input/input9 [ 109.728306][ T5898] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 109.908334][ T5898] usb 8-1: Using ep0 maxpacket: 8 [ 109.911848][ T5898] usb 8-1: config 0 has an invalid interface number: 186 but max is 0 [ 109.914537][ T5898] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.917758][ T5898] usb 8-1: config 0 has no interface number 0 [ 109.919804][ T5898] usb 8-1: config 0 interface 186 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 109.926595][ T5898] usb 8-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 109.929611][ T5898] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.932212][ T5898] usb 8-1: Product: syz [ 109.933595][ T5898] usb 8-1: Manufacturer: syz [ 109.935404][ T5898] usb 8-1: SerialNumber: syz [ 109.942489][ T5898] usb 8-1: config 0 descriptor?? [ 109.956159][ T5898] iowarrior 8-1:0.186: no interrupt-in endpoint found [ 110.008422][ T5898] usb 7-1: USB disconnect, device number 16 [ 110.056472][ T6823] netlink: 'syz.2.284': attribute type 21 has an invalid length. [ 110.060370][ T6823] netlink: 128 bytes leftover after parsing attributes in process `syz.2.284'. [ 110.069612][ T6823] netlink: 3 bytes leftover after parsing attributes in process `syz.2.284'. [ 110.429589][ T5898] usb 8-1: USB disconnect, device number 17 [ 110.638341][ T6831] scsi host6: ib_srp: Connection 0/4 to 0.0.0.0 failed [ 110.903370][ T6837] kvm: emulating exchange as write [ 110.962773][ T6837] Mount JFS Failure: -5 [ 111.005374][ T6841] siw: device registration error -23 [ 111.014253][ T6837] xt_hl: Unknown TTL match mode: 255 [ 111.037558][ T6837] kAFS: unable to lookup cell 'foosyz' [ 111.202554][ T6848] option changes via remount are deprecated (pid=6847 comm=syz.0.293) [ 111.205974][ T5736] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 111.958325][ T5898] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 112.108379][ T5898] usb 6-1: Using ep0 maxpacket: 8 [ 112.112879][ T5898] usb 6-1: config 0 has an invalid interface number: 186 but max is 0 [ 112.116583][ T5898] usb 6-1: config 0 has no interface number 0 [ 112.119245][ T5898] usb 6-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 112.123717][ T5898] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 112.127769][ T5898] usb 6-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 112.132734][ T5898] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 112.137541][ T5898] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 112.141976][ T5898] usb 6-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 112.150345][ T5898] usb 6-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 112.154136][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.157301][ T5898] usb 6-1: Product: syz [ 112.159562][ T5898] usb 6-1: Manufacturer: syz [ 112.161423][ T5898] usb 6-1: SerialNumber: syz [ 112.166210][ T5898] usb 6-1: config 0 descriptor?? [ 112.403555][ T5898] iowarrior 6-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 112.416143][ T5898] usb 6-1: USB disconnect, device number 9 [ 112.600887][ T6867] netlink: 'syz.1.299': attribute type 21 has an invalid length. [ 112.604563][ T6867] netlink: 128 bytes leftover after parsing attributes in process `syz.1.299'. [ 112.608189][ T6867] netlink: 3 bytes leftover after parsing attributes in process `syz.1.299'. [ 113.228374][ T34] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 113.358325][ T34] usb 5-1: device descriptor read/64, error -71 [ 113.608327][ T34] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 113.758397][ T34] usb 5-1: device descriptor read/64, error -71 [ 113.868833][ T34] usb usb5-port1: attempt power cycle [ 114.228354][ T34] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 114.259031][ T34] usb 5-1: device descriptor read/8, error -71 [ 114.434365][ T5801] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 114.444724][ T6893] netlink: 'syz.3.308': attribute type 1 has an invalid length. [ 114.477555][ T6893] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.507418][ T6893] bond1: (slave veth3): Enslaving as an active interface with a down link [ 114.509319][ T34] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 114.522569][ T6893] netlink: 28 bytes leftover after parsing attributes in process `syz.3.308'. [ 114.528823][ T34] usb 5-1: device descriptor read/8, error -71 [ 114.588752][ T5801] usb 7-1: Using ep0 maxpacket: 8 [ 114.592051][ T5801] usb 7-1: config 0 has an invalid interface number: 186 but max is 0 [ 114.594868][ T5801] usb 7-1: config 0 has no interface number 0 [ 114.596889][ T5801] usb 7-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 114.601674][ T5801] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 114.604865][ T5801] usb 7-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 114.638816][ T34] usb usb5-port1: unable to enumerate USB device [ 114.704045][ T5801] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 114.709659][ T5801] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 114.713372][ T5801] usb 7-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 114.721630][ T5801] usb 7-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 114.725476][ T5801] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.728787][ T5801] usb 7-1: Product: syz [ 114.730497][ T5801] usb 7-1: Manufacturer: syz [ 114.732485][ T5801] usb 7-1: SerialNumber: syz [ 114.737825][ T5801] usb 7-1: config 0 descriptor?? [ 116.162295][ T6907] scsi host6: ib_srp: Connection 0/4 to 0.0.0.0 failed [ 116.201711][ T5801] iowarrior 7-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 116.266619][ T6904] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 116.313168][ T5825] usb 7-1: USB disconnect, device number 17 [ 116.616948][ T6905] syz0: rxe_newlink: already configured on bond_slave_1 [ 117.020483][ T6928] FAULT_INJECTION: forcing a failure. [ 117.020483][ T6928] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.024677][ T6928] CPU: 2 UID: 0 PID: 6928 Comm: syz.2.319 Not tainted syzkaller #0 PREEMPT(full) [ 117.024692][ T6928] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 117.024699][ T6928] Call Trace: [ 117.024704][ T6928] [ 117.024708][ T6928] dump_stack_lvl+0x100/0x190 [ 117.024726][ T6928] should_fail_ex.cold+0x5/0xa [ 117.024742][ T6928] _copy_to_iter+0x5a4/0x1720 [ 117.024762][ T6928] ? __pfx__copy_to_iter+0x10/0x10 [ 117.024778][ T6928] ? do_recvmmsg+0x54d/0x740 [ 117.024793][ T6928] ? __sys_recvmmsg+0x113/0x270 [ 117.024808][ T6928] ? __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 117.024823][ T6928] ? __skb_recv_datagram+0x1b2/0x220 [ 117.024840][ T6928] simple_copy_to_iter+0x46/0x90 [ 117.024853][ T6928] __skb_datagram_iter+0x129/0x900 [ 117.024865][ T6928] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 117.024879][ T6928] ? skb_recv_datagram+0x88/0xc0 [ 117.024893][ T6928] skb_copy_datagram_iter+0xa1/0x250 [ 117.024907][ T6928] netlink_recvmsg+0x27e/0xa90 [ 117.024921][ T6928] ? partition_is_populated+0x3a0/0x580 [ 117.024941][ T6928] ? __pfx_netlink_recvmsg+0x10/0x10 [ 117.024953][ T6928] ? __kmalloc_noprof+0x343/0x820 [ 117.024976][ T6928] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 117.024996][ T6928] ? __pfx_netlink_recvmsg+0x10/0x10 [ 117.025014][ T6928] sock_recvmsg+0x1d5/0x220 [ 117.025029][ T6928] ____sys_recvmsg+0x21e/0x670 [ 117.025043][ T6928] ? __pfx_____sys_recvmsg+0x10/0x10 [ 117.025068][ T6928] ? __lock_acquire+0x49f/0x1a40 [ 117.025098][ T6928] ___sys_recvmsg+0x16a/0x1a0 [ 117.025116][ T6928] ? __pfx____sys_recvmsg+0x10/0x10 [ 117.025154][ T6928] do_recvmmsg+0x54d/0x740 [ 117.025176][ T6928] ? __pfx_do_recvmmsg+0x10/0x10 [ 117.025188][ T6928] ? __might_fault+0xc5/0x140 [ 117.025220][ T6928] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 117.025254][ T6928] __sys_recvmmsg+0x113/0x270 [ 117.025274][ T6928] ? __pfx___sys_recvmmsg+0x10/0x10 [ 117.025292][ T6928] ? ksys_write+0x1ac/0x250 [ 117.025304][ T6928] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 117.025316][ T6928] ? __do_fast_syscall_32+0x98/0x970 [ 117.025333][ T6928] ? lockdep_hardirqs_on+0x78/0x100 [ 117.025348][ T6928] __do_fast_syscall_32+0xe7/0x970 [ 117.025364][ T6928] ? lockdep_hardirqs_on+0x78/0x100 [ 117.025380][ T6928] do_fast_syscall_32+0x32/0x70 [ 117.025397][ T6928] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 117.025412][ T6928] RIP: 0023:0xf70befec [ 117.025427][ T6928] Code: Unable to access opcode bytes at 0xf70befc2. [ 117.025433][ T6928] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000151 [ 117.025446][ T6928] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800037c0 [ 117.025452][ T6928] RDX: 00000000000003b4 RSI: 0000000002040000 RDI: 0000000080003700 [ 117.025459][ T6928] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 117.025466][ T6928] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 117.025473][ T6928] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 117.025486][ T6928] [ 117.064987][ T6926] siw: device registration error -23 [ 117.234702][ T6934] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 117.244274][ T6934] CIFS: Attempting to mount //127.0.0.1/share [ 117.271516][ T6934] CIFS: VFS: Error connecting to socket. Aborting operation. [ 117.275437][ T6934] CIFS: VFS: cifs_mount failed w/return code = -111 [ 117.283502][ T6926] scsi host6: ib_srp: Connection 0/4 to 0.0.0.0 failed [ 117.492219][ T6936] netlink: 28 bytes leftover after parsing attributes in process `syz.0.321'. [ 118.015644][ T6947] netlink: 'syz.2.325': attribute type 21 has an invalid length. [ 118.026566][ T6947] netlink: 128 bytes leftover after parsing attributes in process `syz.2.325'. [ 118.035523][ T6947] netlink: 3 bytes leftover after parsing attributes in process `syz.2.325'. [ 118.073398][ T6949] scsi host6: ib_srp: Connection 0/4 to 0.0.0.0 failed [ 118.253366][ T6953] bridge_slave_0: left allmulticast mode [ 118.253422][ T6953] bridge_slave_0: left promiscuous mode [ 118.253763][ T6953] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.296064][ T6953] bridge_slave_1: left allmulticast mode [ 118.296120][ T6953] bridge_slave_1: left promiscuous mode [ 118.296506][ T6953] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.324244][ T6956] netlink: 152 bytes leftover after parsing attributes in process `syz.1.327'. [ 118.350889][ T6953] bond0: (slave bond_slave_0): Releasing backup interface [ 118.413493][ T6953] bond0: (slave bond_slave_1): Releasing backup interface [ 118.447445][ T6957] siw: device registration error -23 [ 118.509885][ T6953] team0: Port device team_slave_0 removed [ 118.544857][ T6953] team0: Port device team_slave_1 removed [ 118.550930][ T6953] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.550983][ T6953] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.612806][ T6953] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.612955][ T6953] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.623310][ T6953] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 118.981261][ T6948] Invalid source name [ 118.982661][ T6948] UBIFS error (pid: 6948): cannot open "./file0", error -22 [ 119.560314][ T6978] 9pnet_virtio: no channels available for device syz [ 119.915044][ T6985] siw: device registration error -23 [ 120.640818][ T6988] netlink: 'syz.0.334': attribute type 21 has an invalid length. [ 120.644275][ T6988] netlink: 128 bytes leftover after parsing attributes in process `syz.0.334'. [ 120.648021][ T6988] netlink: 3 bytes leftover after parsing attributes in process `syz.0.334'. [ 120.998076][ T7000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.337'. [ 121.992214][ T7005] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.156418][ T7018] netlink: 168 bytes leftover after parsing attributes in process `syz.1.343'. [ 122.168699][ T7019] netlink: 40 bytes leftover after parsing attributes in process `syz.0.342'. [ 122.175801][ T7019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.342'. [ 122.184757][ T7018] syzkaller0: entered promiscuous mode [ 122.191190][ T7018] syzkaller0: entered allmulticast mode [ 122.414448][ T7025] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.430723][ T7026] scsi host6: ib_srp: Connection 0/4 to 0.0.0.0 failed [ 122.802986][ T7034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.347'. [ 122.807196][ T7034] netlink: 'syz.0.347': attribute type 1 has an invalid length. [ 122.907238][ T7037] FAULT_INJECTION: forcing a failure. [ 122.907238][ T7037] name failslab, interval 1, probability 0, space 0, times 1 [ 122.912165][ T7037] CPU: 0 UID: 0 PID: 7037 Comm: syz.1.348 Not tainted syzkaller #0 PREEMPT(full) [ 122.912182][ T7037] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 122.912190][ T7037] Call Trace: [ 122.912194][ T7037] [ 122.912199][ T7037] dump_stack_lvl+0x100/0x190 [ 122.912217][ T7037] should_fail_ex.cold+0x5/0xa [ 122.912230][ T7037] should_failslab+0xc2/0x120 [ 122.912247][ T7037] __kmalloc_noprof+0xfc/0x820 [ 122.912262][ T7037] ? comedi_alloc_devpriv+0x22/0x60 [ 122.912290][ T7037] comedi_alloc_devpriv+0x22/0x60 [ 122.912304][ T7037] pcl816_attach+0x4d/0xb30 [ 122.912320][ T7037] comedi_device_attach+0x40e/0x6b0 [ 122.912337][ T7037] do_devconfig_ioctl+0x1b3/0x6d0 [ 122.912353][ T7037] ? comedi_unlocked_ioctl+0x180/0x3310 [ 122.912373][ T7037] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 122.912396][ T7037] ? tomoyo_path_number_perm+0x46d/0x580 [ 122.912411][ T7037] ? kasan_save_stack+0x3f/0x50 [ 122.912425][ T7037] ? kasan_save_stack+0x30/0x50 [ 122.912439][ T7037] ? kasan_save_track+0x14/0x30 [ 122.912453][ T7037] ? kasan_save_free_info+0x3b/0x70 [ 122.912467][ T7037] comedi_unlocked_ioctl+0x860/0x3310 [ 122.912489][ T7037] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 122.912519][ T7037] ? kasan_quarantine_put+0x104/0x240 [ 122.912532][ T7037] ? lockdep_hardirqs_on+0x78/0x100 [ 122.912550][ T7037] ? find_held_lock+0x2b/0x80 [ 122.912565][ T7037] ? tomoyo_path_number_perm+0x28f/0x580 [ 122.912579][ T7037] ? tomoyo_path_number_perm+0x28f/0x580 [ 122.912596][ T7037] ? tomoyo_path_number_perm+0x188/0x580 [ 122.912613][ T7037] comedi_compat_ioctl+0x438/0xe20 [ 122.912633][ T7037] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 122.912652][ T7037] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 122.912670][ T7037] ? do_vfs_ioctl+0x226/0x13e0 [ 122.912687][ T7037] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 122.912707][ T7037] ? find_held_lock+0x2b/0x80 [ 122.912721][ T7037] ? __fget_files+0x215/0x3d0 [ 122.912732][ T7037] ? hook_file_ioctl_common+0x140/0x440 [ 122.912750][ T7037] ? __fget_files+0x21f/0x3d0 [ 122.912764][ T7037] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 122.912783][ T7037] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 122.912802][ T7037] __do_fast_syscall_32+0xe7/0x970 [ 122.912819][ T7037] ? lockdep_hardirqs_on+0x78/0x100 [ 122.912836][ T7037] do_fast_syscall_32+0x32/0x70 [ 122.912853][ T7037] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 122.912868][ T7037] RIP: 0023:0xf702efec [ 122.912884][ T7037] Code: Unable to access opcode bytes at 0xf702efc2. [ 122.912889][ T7037] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 122.912902][ T7037] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040946400 [ 122.912909][ T7037] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 122.912915][ T7037] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 122.912921][ T7037] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 122.912928][ T7037] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 122.912941][ T7037] [ 123.196344][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.236962][ T7044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.240693][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.251384][ T7044] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 123.518328][ T6495] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 123.663085][ T6495] usb 6-1: device descriptor read/64, error -71 [ 123.693330][ T7057] scsi host6: ib_srp: Connection 0/4 to 0.0.0.0 failed [ 123.860083][ T7064] netlink: 'syz.0.352': attribute type 4 has an invalid length. [ 123.908378][ T6495] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 123.909160][ T6285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.940127][ T7065] pim6reg: entered allmulticast mode [ 123.956605][ T7063] pim6reg: left allmulticast mode [ 124.118802][ T6495] usb 6-1: device descriptor read/64, error -71 [ 124.228598][ T6495] usb usb6-port1: attempt power cycle [ 124.231200][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.283871][ T7073] netlink: 'syz.0.360': attribute type 21 has an invalid length. [ 124.286434][ T7073] netlink: 128 bytes leftover after parsing attributes in process `syz.0.360'. [ 124.290063][ T7073] netlink: 3 bytes leftover after parsing attributes in process `syz.0.360'. [ 124.568332][ T6495] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 124.598856][ T6495] usb 6-1: device descriptor read/8, error -71 [ 124.783295][ T7076] read descriptors [ 124.805188][ T5731] ffs_data_put(): freeing [ 124.980551][ T7081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.362'. [ 124.999595][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.003193][ T6495] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 125.682515][ T5518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.693999][ T6495] usb 6-1: device descriptor read/8, error -71 [ 125.800697][ T6495] usb usb6-port1: unable to enumerate USB device [ 125.849634][ T7092] netlink: 4 bytes leftover after parsing attributes in process `syz.0.365'. [ 125.867589][ T7092] netlink: 4 bytes leftover after parsing attributes in process `syz.0.365'. [ 125.872824][ T7092] netlink: 4 bytes leftover after parsing attributes in process `syz.0.365'. [ 126.149623][ T7098] lo speed is unknown, defaulting to 1000 [ 126.229923][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.233913][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.088349][ T6495] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 127.259897][ T6495] usb 7-1: config 0 has an invalid interface number: 50 but max is 0 [ 127.263422][ T6495] usb 7-1: config 0 has no interface number 0 [ 127.265972][ T6495] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 127.275278][ T6495] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 127.280843][ T6495] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.284297][ T6495] usb 7-1: Product: syz [ 127.286039][ T6495] usb 7-1: Manufacturer: syz [ 127.287996][ T6495] usb 7-1: SerialNumber: syz [ 127.294291][ T6495] usb 7-1: config 0 descriptor?? [ 127.303398][ T6495] yurex 7-1:0.50: USB YUREX device now attached to Yurex #0 [ 127.425621][ T6495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.503716][ T7118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.508798][ T7118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.515247][ T6495] usb 7-1: USB disconnect, device number 18 [ 127.529071][ T6495] yurex 7-1:0.50: USB YUREX #0 now disconnected [ 127.586699][ T7124] netlink: 'syz.3.378': attribute type 21 has an invalid length. [ 127.592004][ T7124] netlink: 128 bytes leftover after parsing attributes in process `syz.3.378'. [ 127.595749][ T7124] netlink: 3 bytes leftover after parsing attributes in process `syz.3.378'. [ 127.754279][ T7127] scsi host6: ib_srp: Connection 0/4 to 0.0.0.0 failed [ 127.914728][ T7136] siw: device registration error -23 [ 128.448749][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.468802][ T6495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.735608][ T7145] FAULT_INJECTION: forcing a failure. [ 128.735608][ T7145] name failslab, interval 1, probability 0, space 0, times 0 [ 128.739738][ T7145] CPU: 0 UID: 0 PID: 7145 Comm: syz.3.383 Not tainted syzkaller #0 PREEMPT(full) [ 128.739754][ T7145] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 128.739761][ T7145] Call Trace: [ 128.739766][ T7145] [ 128.739771][ T7145] dump_stack_lvl+0x100/0x190 [ 128.739790][ T7145] should_fail_ex.cold+0x5/0xa [ 128.739804][ T7145] should_failslab+0xc2/0x120 [ 128.739820][ T7145] __kmalloc_cache_noprof+0x91/0x6c0 [ 128.739833][ T7145] ? genl_start+0x1e8/0x970 [ 128.739851][ T7145] genl_start+0x1e8/0x970 [ 128.739868][ T7145] __netlink_dump_start+0x60e/0x990 [ 128.739882][ T7145] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 128.739898][ T7145] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 128.739917][ T7145] ? __pfx_genl_get_cmd+0x10/0x10 [ 128.739929][ T7145] ? __pfx_genl_start+0x10/0x10 [ 128.739941][ T7145] ? __pfx_genl_dumpit+0x10/0x10 [ 128.739954][ T7145] ? __pfx_genl_done+0x10/0x10 [ 128.739969][ T7145] ? __dev_queue_xmit+0xa33/0x4970 [ 128.739983][ T7145] ? __radix_tree_lookup+0x217/0x2b0 [ 128.740003][ T7145] genl_rcv_msg+0x471/0x800 [ 128.740019][ T7145] ? __pfx_genl_rcv_msg+0x10/0x10 [ 128.740033][ T7145] ? __pfx_hwsim_dump_radio_nl+0x10/0x10 [ 128.740061][ T7145] netlink_rcv_skb+0x159/0x420 [ 128.740073][ T7145] ? __pfx_genl_rcv_msg+0x10/0x10 [ 128.740088][ T7145] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 128.740106][ T7145] ? netlink_deliver_tap+0x1ae/0xcc0 [ 128.740120][ T7145] genl_rcv+0x28/0x40 [ 128.740133][ T7145] netlink_unicast+0x585/0x850 [ 128.740147][ T7145] ? __pfx_netlink_unicast+0x10/0x10 [ 128.740163][ T7145] netlink_sendmsg+0x8b0/0xda0 [ 128.740178][ T7145] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.740193][ T7145] ? apparmor_socket_sendmsg+0x15b/0x270 [ 128.740208][ T7145] ____sys_sendmsg+0xa4d/0xbe0 [ 128.740220][ T7145] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.740234][ T7145] ? __pfx_____sys_sendmsg+0x10/0x10 [ 128.740256][ T7145] ___sys_sendmsg+0x190/0x1e0 [ 128.740269][ T7145] ? __pfx____sys_sendmsg+0x10/0x10 [ 128.740288][ T7145] ? find_held_lock+0x2b/0x80 [ 128.740311][ T7145] __sys_sendmsg+0x160/0x210 [ 128.740328][ T7145] ? __pfx___sys_sendmsg+0x10/0x10 [ 128.740347][ T7145] ? __pfx_ksys_write+0x10/0x10 [ 128.740361][ T7145] __do_fast_syscall_32+0xe7/0x970 [ 128.740378][ T7145] ? lockdep_hardirqs_on+0x78/0x100 [ 128.740395][ T7145] do_fast_syscall_32+0x32/0x70 [ 128.740412][ T7145] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 128.740427][ T7145] RIP: 0023:0xf7fe7fec [ 128.740441][ T7145] Code: Unable to access opcode bytes at 0xf7fe7fc2. [ 128.740446][ T7145] RSP: 002b:00000000f548550c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 128.740458][ T7145] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000100 [ 128.740465][ T7145] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 128.740472][ T7145] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 128.740478][ T7145] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 128.740484][ T7145] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 128.740498][ T7145] [ 128.816031][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.932784][ T7143] lo speed is unknown, defaulting to 1000 [ 129.138436][ T850] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 129.155243][ T7157] siw: device registration error -23 [ 129.223858][ T7158] scsi host6: ib_srp: Connection 0/4 to 0.0.0.0 failed [ 129.247462][ T7162] FAULT_INJECTION: forcing a failure. [ 129.247462][ T7162] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.253229][ T7162] CPU: 2 UID: 0 PID: 7162 Comm: syz.0.389 Not tainted syzkaller #0 PREEMPT(full) [ 129.253256][ T7162] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 129.253274][ T7162] Call Trace: [ 129.253280][ T7162] [ 129.253288][ T7162] dump_stack_lvl+0x100/0x190 [ 129.253317][ T7162] should_fail_ex.cold+0x5/0xa [ 129.253339][ T7162] _copy_from_iter+0x1f4/0x1690 [ 129.253373][ T7162] ? __pfx__copy_from_iter+0x10/0x10 [ 129.253400][ T7162] ? _copy_from_iter+0x270/0x1690 [ 129.253432][ T7162] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 129.253461][ T7162] skb_copy_datagram_from_iter+0x11f/0x720 [ 129.253485][ T7162] ? iov_iter_advance+0xac/0x6d0 [ 129.253514][ T7162] tun_get_user+0x1889/0x3c20 [ 129.253547][ T7162] ? __pfx_tun_get_user+0x10/0x10 [ 129.253570][ T7162] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 129.253596][ T7162] ? find_held_lock+0x2b/0x80 [ 129.253619][ T7162] ? tun_get+0x191/0x370 [ 129.253636][ T7162] ? tun_get+0x191/0x370 [ 129.253660][ T7162] tun_chr_write_iter+0xdc/0x200 [ 129.253683][ T7162] vfs_write+0x6ac/0x1050 [ 129.253701][ T7162] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 129.253724][ T7162] ? __pfx_vfs_write+0x10/0x10 [ 129.253740][ T7162] ? find_held_lock+0x2b/0x80 [ 129.253776][ T7162] ksys_write+0x12a/0x250 [ 129.253794][ T7162] ? __pfx_ksys_write+0x10/0x10 [ 129.253810][ T7162] ? ksys_write+0x1ac/0x250 [ 129.253827][ T7162] ? __pfx_ksys_write+0x10/0x10 [ 129.253849][ T7162] __do_fast_syscall_32+0xe7/0x970 [ 129.253876][ T7162] ? lockdep_hardirqs_on+0x78/0x100 [ 129.253904][ T7162] do_fast_syscall_32+0x32/0x70 [ 129.253930][ T7162] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 129.253953][ T7162] RIP: 0023:0xf6fdefec [ 129.253976][ T7162] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 129.253985][ T7162] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 129.254030][ T7162] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001280 [ 129.254042][ T7162] RDX: 0000000000000fce RSI: 0000000000000000 RDI: 0000000000000000 [ 129.254052][ T7162] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 129.254062][ T7162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.254072][ T7162] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 129.254096][ T7162] [ 129.308358][ T850] usb 6-1: Using ep0 maxpacket: 8 [ 129.365487][ T850] usb 6-1: config 0 has an invalid interface number: 186 but max is 0 [ 129.368180][ T850] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.371513][ T850] usb 6-1: config 0 has no interface number 0 [ 129.373355][ T850] usb 6-1: config 0 interface 186 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 129.379250][ T850] usb 6-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 129.382142][ T850] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.384501][ T850] usb 6-1: Product: syz [ 129.385742][ T850] usb 6-1: Manufacturer: syz [ 129.387174][ T850] usb 6-1: SerialNumber: syz [ 129.392692][ T850] usb 6-1: config 0 descriptor?? [ 129.396259][ T850] iowarrior 6-1:0.186: no interrupt-in endpoint found [ 129.518442][ T5518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.551801][ T7171] bridge1: entered promiscuous mode [ 129.553565][ T7171] bridge1: entered allmulticast mode [ 129.600179][ T1157] Bluetooth: hci4: Frame reassembly failed (-84) [ 129.607111][ T7171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.610512][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.671618][ T7149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.673533][ T7149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.683526][ T6495] usb 6-1: USB disconnect, device number 14 [ 130.048336][ T6495] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 130.181905][ T6495] usb 6-1: device descriptor read/64, error -71 [ 130.203023][ T7192] 9pnet_fd: Insufficient options for proto=fd [ 130.250770][ T7193] siw: device registration error -23 [ 130.439712][ T6495] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 130.560595][ T5518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.578366][ T6495] usb 6-1: device descriptor read/64, error -71 [ 130.688947][ T6495] usb usb6-port1: attempt power cycle [ 131.050150][ T6495] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 131.078816][ T6495] usb 6-1: device descriptor read/8, error -71 [ 131.328384][ T6495] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 131.348769][ T6495] usb 6-1: device descriptor read/8, error -71 [ 131.458538][ T6495] usb usb6-port1: unable to enumerate USB device [ 131.510456][ T6285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.588718][ T6495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.668382][ T5734] Bluetooth: hci4: command 0x1003 tx timeout [ 131.668403][ T5736] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 132.038849][ T7220] FAULT_INJECTION: forcing a failure. [ 132.038849][ T7220] name failslab, interval 1, probability 0, space 0, times 0 [ 132.043958][ T7220] CPU: 0 UID: 0 PID: 7220 Comm: syz.0.410 Not tainted syzkaller #0 PREEMPT(full) [ 132.043981][ T7220] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 132.043991][ T7220] Call Trace: [ 132.043998][ T7220] [ 132.044005][ T7220] dump_stack_lvl+0x100/0x190 [ 132.044033][ T7220] should_fail_ex.cold+0x5/0xa [ 132.044053][ T7220] should_failslab+0xc2/0x120 [ 132.044076][ T7220] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 132.044098][ T7220] ? __alloc_skb+0x5b7/0x710 [ 132.044120][ T7220] ? __alloc_skb+0x140/0x710 [ 132.044144][ T7220] __alloc_skb+0x140/0x710 [ 132.044164][ T7220] ? __alloc_skb+0x5b7/0x710 [ 132.044189][ T7220] ? __pfx___alloc_skb+0x10/0x10 [ 132.044216][ T7220] netlink_ack+0x117/0xb80 [ 132.044242][ T7220] netlink_rcv_skb+0x333/0x420 [ 132.044261][ T7220] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 132.044287][ T7220] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 132.044316][ T7220] ? ns_capable+0xd2/0xf0 [ 132.044338][ T7220] nfnetlink_rcv+0x1b3/0x440 [ 132.044360][ T7220] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 132.044383][ T7220] ? netlink_deliver_tap+0x1ae/0xcc0 [ 132.044405][ T7220] netlink_unicast+0x585/0x850 [ 132.044427][ T7220] ? __pfx_netlink_unicast+0x10/0x10 [ 132.044451][ T7220] netlink_sendmsg+0x8b0/0xda0 [ 132.044473][ T7220] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.044495][ T7220] ? apparmor_socket_sendmsg+0x15b/0x270 [ 132.044517][ T7220] ____sys_sendmsg+0xa4d/0xbe0 [ 132.044534][ T7220] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.044553][ T7220] ? __pfx_____sys_sendmsg+0x10/0x10 [ 132.044580][ T7220] ___sys_sendmsg+0x190/0x1e0 [ 132.044599][ T7220] ? __pfx____sys_sendmsg+0x10/0x10 [ 132.044628][ T7220] ? find_held_lock+0x2b/0x80 [ 132.044662][ T7220] __sys_sendmsg+0x160/0x210 [ 132.044685][ T7220] ? __pfx___sys_sendmsg+0x10/0x10 [ 132.044714][ T7220] ? __pfx_ksys_write+0x10/0x10 [ 132.044734][ T7220] __do_fast_syscall_32+0xe7/0x970 [ 132.044759][ T7220] ? lockdep_hardirqs_on+0x78/0x100 [ 132.044784][ T7220] do_fast_syscall_32+0x32/0x70 [ 132.044807][ T7220] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 132.044828][ T7220] RIP: 0023:0xf6fdefec [ 132.044849][ T7220] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 132.044857][ T7220] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 132.044875][ T7220] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 132.044885][ T7220] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 132.044895][ T7220] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 132.044904][ T7220] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 132.044913][ T7220] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 132.044934][ T7220] [ 132.153511][ T7222] siw: device registration error -23 [ 132.410659][ T7227] scsi host6: ib_srp: Connection 0/4 to 0.0.0.0 failed [ 132.555946][ T7231] siw: device registration error -23 [ 132.629555][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.631749][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.735707][ T7232] scsi host6: ib_srp: Connection 0/4 to 0.0.0.0 failed [ 132.820073][ T6495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.846347][ T7240] netlink: 'syz.1.416': attribute type 21 has an invalid length. [ 132.850025][ T7240] netlink: 128 bytes leftover after parsing attributes in process `syz.1.416'. [ 132.853868][ T7240] netlink: 3 bytes leftover after parsing attributes in process `syz.1.416'. [ 132.923703][ T7243] FAULT_INJECTION: forcing a failure. [ 132.923703][ T7243] name failslab, interval 1, probability 0, space 0, times 0 [ 132.932784][ T7243] CPU: 2 UID: 0 PID: 7243 Comm: syz.3.417 Not tainted syzkaller #0 PREEMPT(full) [ 132.932802][ T7243] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 132.932809][ T7243] Call Trace: [ 132.932813][ T7243] [ 132.932818][ T7243] dump_stack_lvl+0x100/0x190 [ 132.932836][ T7243] should_fail_ex.cold+0x5/0xa [ 132.932849][ T7243] should_failslab+0xc2/0x120 [ 132.932866][ T7243] __kmalloc_noprof+0xfc/0x820 [ 132.932879][ T7243] ? rcu_is_watching+0x12/0xc0 [ 132.932894][ T7243] ? tomoyo_realpath_from_path+0xb6/0x690 [ 132.932929][ T7243] tomoyo_realpath_from_path+0xb6/0x690 [ 132.932950][ T7243] tomoyo_mount_acl+0x1b6/0x8b0 [ 132.932965][ T7243] ? is_bpf_text_address+0x8a/0x1a0 [ 132.932987][ T7243] ? is_bpf_text_address+0x8a/0x1a0 [ 132.933011][ T7243] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 132.933038][ T7243] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 132.933061][ T7243] ? kernel_text_address+0x8d/0x100 [ 132.933088][ T7243] ? unwind_get_return_address+0x59/0xa0 [ 132.933115][ T7243] ? arch_stack_walk+0xa6/0xf0 [ 132.933145][ T7243] ? tomoyo_domain+0xb2/0x150 [ 132.933155][ T7243] ? tomoyo_profile+0x47/0x60 [ 132.933167][ T7243] tomoyo_mount_permission+0x214/0x460 [ 132.933182][ T7243] ? tomoyo_mount_permission+0x1f6/0x460 [ 132.933204][ T7243] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 132.933228][ T7243] security_sb_mount+0xdd/0x270 [ 132.933241][ T7243] path_mount+0x158/0x23d0 [ 132.933258][ T7243] ? __pfx_path_mount+0x10/0x10 [ 132.933270][ T7243] ? lockdep_hardirqs_on+0x78/0x100 [ 132.933289][ T7243] ? putname+0xb1/0x110 [ 132.933301][ T7243] ? kmem_cache_free+0x127/0x6b0 [ 132.933317][ T7243] ? __ia32_sys_mount+0x292/0x310 [ 132.933330][ T7243] __ia32_sys_mount+0x292/0x310 [ 132.933344][ T7243] ? __pfx___ia32_sys_mount+0x10/0x10 [ 132.933358][ T7243] ? ksys_write+0x1ac/0x250 [ 132.933368][ T7243] ? __pfx_ksys_write+0x10/0x10 [ 132.933381][ T7243] __do_fast_syscall_32+0xe7/0x970 [ 132.933398][ T7243] ? lockdep_hardirqs_on+0x78/0x100 [ 132.933415][ T7243] do_fast_syscall_32+0x32/0x70 [ 132.933432][ T7243] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 132.933447][ T7243] RIP: 0023:0xf7fe7fec [ 132.933463][ T7243] Code: Unable to access opcode bytes at 0xf7fe7fc2. [ 132.933468][ T7243] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 132.933480][ T7243] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000040 [ 132.933488][ T7243] RDX: 0000000080000080 RSI: 0000000000200000 RDI: 0000000000000000 [ 132.933494][ T7243] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 132.933501][ T7243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.933507][ T7243] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 132.933521][ T7243] [ 132.933550][ T7243] ERROR: Out of memory at tomoyo_realpath_from_path. [ 133.548396][ T5898] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 133.681926][ T42] audit: type=1800 audit(1786129547.725:28): pid=7244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.415" name="/" dev="fuse" ino=4 res=0 errno=0 [ 133.718609][ T5898] usb 8-1: Using ep0 maxpacket: 8 [ 133.722596][ T5898] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.733922][ T5898] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 133.743582][ T5898] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 133.752672][ T5898] usb 8-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 133.756831][ T5898] usb 8-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 133.761294][ T5898] usb 8-1: Product: syz [ 133.763140][ T5898] usb 8-1: Manufacturer: syz [ 133.765026][ T5898] usb 8-1: SerialNumber: syz [ 133.777693][ T5898] usb 8-1: config 0 descriptor?? [ 133.799122][ T7256] netlink: 'syz.0.421': attribute type 21 has an invalid length. [ 133.802317][ T7256] netlink: 128 bytes leftover after parsing attributes in process `syz.0.421'. [ 133.805391][ T7256] netlink: 3 bytes leftover after parsing attributes in process `syz.0.421'. [ 133.828641][ T6495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.838470][ T5898] rc_core: IR keymap rc-imon-rsc not found [ 133.840817][ T5898] Registered IR keymap rc-empty [ 133.846591][ T5898] rc rc0: iMON Station as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 133.853303][ T5898] input: iMON Station as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input12 [ 133.917165][ T7260] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 134.214687][ T5878] usb 8-1: USB disconnect, device number 18 [ 134.328566][ T7271] syz0: rxe_newlink: already configured on bond_slave_1 [ 134.550142][ T850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.551577][ T7273] FAULT_INJECTION: forcing a failure. [ 134.551577][ T7273] name failslab, interval 1, probability 0, space 0, times 0 [ 134.557907][ T7273] CPU: 3 UID: 0 PID: 7273 Comm: syz.2.426 Not tainted syzkaller #0 PREEMPT(full) [ 134.557932][ T7273] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 134.557942][ T7273] Call Trace: [ 134.557949][ T7273] [ 134.557956][ T7273] dump_stack_lvl+0x100/0x190 [ 134.558013][ T7273] should_fail_ex.cold+0x5/0xa [ 134.558034][ T7273] should_failslab+0xc2/0x120 [ 134.558059][ T7273] __kmalloc_noprof+0xfc/0x820 [ 134.558081][ T7273] ? __pfx_dynamic_dname+0x10/0x10 [ 134.558106][ T7273] ? tomoyo_encode2+0xfb/0x3c0 [ 134.558136][ T7273] tomoyo_encode2+0xfb/0x3c0 [ 134.558165][ T7273] tomoyo_encode+0x29/0x50 [ 134.558190][ T7273] tomoyo_realpath_from_path+0x18c/0x690 [ 134.558237][ T7273] tomoyo_path_number_perm+0x23c/0x580 [ 134.558258][ T7273] ? tomoyo_path_number_perm+0x22e/0x580 [ 134.558281][ T7273] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 134.558304][ T7273] ? get_pid_task+0x106/0x250 [ 134.558349][ T7273] ? find_held_lock+0x2b/0x80 [ 134.558372][ T7273] ? __fget_files+0x215/0x3d0 [ 134.558386][ T7273] ? hook_file_ioctl_common+0x140/0x440 [ 134.558406][ T7273] ? __fget_files+0x215/0x3d0 [ 134.558428][ T7273] ? __fget_files+0x21f/0x3d0 [ 134.558449][ T7273] security_file_ioctl_compat+0xd3/0x230 [ 134.558472][ T7273] __ia32_compat_sys_ioctl+0xc2/0x360 [ 134.558502][ T7273] __do_fast_syscall_32+0xe7/0x970 [ 134.558530][ T7273] ? lockdep_hardirqs_on+0x78/0x100 [ 134.558556][ T7273] do_fast_syscall_32+0x32/0x70 [ 134.558581][ T7273] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 134.558605][ T7273] RIP: 0023:0xf70befec [ 134.558628][ T7273] Code: Unable to access opcode bytes at 0xf70befc2. [ 134.558637][ T7273] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 134.558656][ T7273] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008b34 [ 134.558667][ T7273] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 134.558678][ T7273] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 134.558688][ T7273] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 134.558699][ T7273] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 134.558725][ T7273] [ 134.641744][ T7273] ERROR: Out of memory at tomoyo_realpath_from_path. [ 134.922367][ T7279] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 134.935326][ T7277] netlink: 'syz.2.428': attribute type 21 has an invalid length. [ 134.939306][ T7277] netlink: 128 bytes leftover after parsing attributes in process `syz.2.428'. [ 134.947823][ T7277] netlink: 3 bytes leftover after parsing attributes in process `syz.2.428'. [ 135.206320][ T6495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.818019][ T7292] dlm: Unknown command passed to DLM device : 3 [ 135.818019][ T7292] [ 135.856117][ T7292] block2mtd: error: cannot open device ›¿Ta4G’gÿò)—Š_ÊÕ¤ÏóÊEvr!4¼Ž>=Z{àBÁyÕ<0\ŠÊi=Å [ 135.856117][ T7292] \©œ!ug‰[ [ 136.069613][ T7301] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 136.228520][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.266492][ T7303] syz0: rxe_newlink: already configured on bond_slave_1 [ 136.393618][ T7305] overlayfs: overlapping lowerdir path [ 136.788411][ T60] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 136.939187][ T60] usb 5-1: Using ep0 maxpacket: 8 [ 136.949398][ T60] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 136.952062][ T60] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.961982][ T60] usb 5-1: config 0 has no interface number 0 [ 136.963947][ T60] usb 5-1: config 0 interface 186 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 136.976178][ T60] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 136.979557][ T60] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.984346][ T60] usb 5-1: Product: syz [ 136.985678][ T60] usb 5-1: Manufacturer: syz [ 136.992383][ T60] usb 5-1: SerialNumber: syz [ 136.997269][ T60] usb 5-1: config 0 descriptor?? [ 137.011946][ T60] iowarrior 5-1:0.186: no interrupt-in endpoint found [ 137.147353][ T13] tipc: Subscription rejected, illegal request [ 137.261250][ T7317] siw: device registration error -23 [ 137.268553][ T6495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.285614][ T7321] netlink: 168 bytes leftover after parsing attributes in process `syz.2.442'. [ 137.327575][ T7323] scsi host6: ib_srp: Connection 0/4 to 0.0.0.0 failed [ 137.414857][ T7330] usb 1-1: USB disconnect, device number 2 [ 137.415581][ T7307] lo speed is unknown, defaulting to 1000 [ 137.536618][ T7337] hub 1-0:1.0: USB hub found [ 137.538546][ T7337] hub 1-0:1.0: 6 ports detected [ 137.585064][ T7339] overlayfs: overlapping lowerdir path [ 137.601855][ T6285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.626257][ T7343] ubi16: attaching mtd0 [ 137.632094][ T7343] ubi16: scanning is finished [ 137.633785][ T7343] ubi16 error: ubi_read_volume_table: the layout volume was not found [ 137.674311][ T7345] netlink: 'syz.0.447': attribute type 21 has an invalid length. [ 137.677078][ T7345] netlink: 128 bytes leftover after parsing attributes in process `syz.0.447'. [ 137.683258][ T7345] netlink: 3 bytes leftover after parsing attributes in process `syz.0.447'. [ 137.683339][ T6495] usb 5-1: USB disconnect, device number 12 [ 137.684608][ T7346] netlink: 44 bytes leftover after parsing attributes in process `syz.3.446'. [ 137.849138][ T7343] ubi16 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 137.921701][ T5801] usb 1-1: new high-speed USB device number 3 using ehci-pci [ 138.051385][ T7349] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.287896][ T7353] FAULT_INJECTION: forcing a failure. [ 138.287896][ T7353] name failslab, interval 1, probability 0, space 0, times 0 [ 138.293501][ T7353] CPU: 3 UID: 0 PID: 7353 Comm: syz.3.450 Not tainted syzkaller #0 PREEMPT(full) [ 138.293519][ T7353] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 138.293527][ T7353] Call Trace: [ 138.293531][ T7353] [ 138.293536][ T7353] dump_stack_lvl+0x100/0x190 [ 138.293555][ T7353] should_fail_ex.cold+0x5/0xa [ 138.293569][ T7353] should_failslab+0xc2/0x120 [ 138.293585][ T7353] __kmalloc_noprof+0xfc/0x820 [ 138.293601][ T7353] ? rcu_is_watching+0x12/0xc0 [ 138.293621][ T7353] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 138.293649][ T7353] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 138.293676][ T7353] genl_family_rcv_msg_doit+0xc7/0x300 [ 138.293701][ T7353] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 138.293724][ T7353] ? genl_get_cmd+0x3e7/0x760 [ 138.293751][ T7353] ? bpf_lsm_capable+0x9/0x10 [ 138.293772][ T7353] ? security_capable+0x80/0x260 [ 138.293795][ T7353] ? ns_capable+0xd2/0xf0 [ 138.293816][ T7353] genl_rcv_msg+0x560/0x800 [ 138.293844][ T7353] ? __pfx_genl_rcv_msg+0x10/0x10 [ 138.293867][ T7353] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 138.293897][ T7353] ? __pfx_nl80211_new_key+0x10/0x10 [ 138.293914][ T7353] ? __pfx_nl80211_post_doit+0x10/0x10 [ 138.293969][ T7353] netlink_rcv_skb+0x159/0x420 [ 138.293991][ T7353] ? __pfx_genl_rcv_msg+0x10/0x10 [ 138.294015][ T7353] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 138.294047][ T7353] ? netlink_deliver_tap+0x1ae/0xcc0 [ 138.294071][ T7353] genl_rcv+0x28/0x40 [ 138.294092][ T7353] netlink_unicast+0x585/0x850 [ 138.294117][ T7353] ? __pfx_netlink_unicast+0x10/0x10 [ 138.294144][ T7353] netlink_sendmsg+0x8b0/0xda0 [ 138.294175][ T7353] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.294198][ T7353] ? apparmor_socket_sendmsg+0x15b/0x270 [ 138.294222][ T7353] ____sys_sendmsg+0xa4d/0xbe0 [ 138.294242][ T7353] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.294266][ T7353] ? __pfx_____sys_sendmsg+0x10/0x10 [ 138.294295][ T7353] ___sys_sendmsg+0x190/0x1e0 [ 138.294312][ T7353] ? __pfx____sys_sendmsg+0x10/0x10 [ 138.294330][ T7353] ? find_held_lock+0x2b/0x80 [ 138.294354][ T7353] __sys_sendmsg+0x160/0x210 [ 138.294370][ T7353] ? __pfx___sys_sendmsg+0x10/0x10 [ 138.294390][ T7353] ? __pfx_ksys_write+0x10/0x10 [ 138.294403][ T7353] __do_fast_syscall_32+0xe7/0x970 [ 138.294421][ T7353] ? lockdep_hardirqs_on+0x78/0x100 [ 138.294438][ T7353] do_fast_syscall_32+0x32/0x70 [ 138.294455][ T7353] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 138.294470][ T7353] RIP: 0023:0xf7fe7fec [ 138.294487][ T7353] Code: Unable to access opcode bytes at 0xf7fe7fc2. [ 138.294492][ T7353] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 138.294505][ T7353] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240 [ 138.294512][ T7353] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 138.294518][ T7353] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 138.294524][ T7353] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 138.294531][ T7353] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 138.294544][ T7353] [ 138.418936][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.421500][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.523618][ T5801] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 138.526565][ T5801] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 138.529289][ T5801] usb 1-1: Product: QEMU USB Tablet [ 138.531007][ T5801] usb 1-1: Manufacturer: QEMU [ 138.532650][ T5801] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 138.563316][ T5801] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.0002/input/input13 [ 138.639599][ T7361] __nla_validate_parse: 1 callbacks suppressed [ 138.639613][ T7361] netlink: 152 bytes leftover after parsing attributes in process `syz.3.454'. [ 138.656091][ T7363] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 138.659461][ T7363] bridge1: entered allmulticast mode [ 138.663361][ T5801] hid-generic 0003:0627:0001.0002: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 138.838059][ T7372] siw: device registration error -23 [ 139.433976][ T6495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.938522][ T5878] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 140.068425][ T5878] usb 5-1: device descriptor read/64, error -71 [ 140.308479][ T5878] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 140.438449][ T5878] usb 5-1: device descriptor read/64, error -71 [ 140.468858][ T6495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.604095][ T7403] netlink: 'syz.2.469': attribute type 21 has an invalid length. [ 140.604920][ T7404] netlink: 'syz.1.465': attribute type 21 has an invalid length. [ 140.607433][ T7403] netlink: 128 bytes leftover after parsing attributes in process `syz.2.469'. [ 140.612824][ T7404] netlink: 128 bytes leftover after parsing attributes in process `syz.1.465'. [ 140.614660][ T7403] netlink: 3 bytes leftover after parsing attributes in process `syz.2.469'. [ 140.622968][ T7404] netlink: 3 bytes leftover after parsing attributes in process `syz.1.465'. [ 140.640977][ T6285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.762158][ T5878] usb usb5-port1: attempt power cycle [ 141.098373][ T5878] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 141.119018][ T5878] usb 5-1: device descriptor read/8, error -71 [ 141.358489][ T5878] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 141.379021][ T5878] usb 5-1: device descriptor read/8, error -71 [ 141.498922][ T5878] usb usb5-port1: unable to enumerate USB device [ 141.580076][ T7413] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 142.444808][ T6495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.655077][ T6285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.668479][ T6285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.671548][ T6285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.674216][ T6285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.677509][ T6285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.679100][ T5801] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 142.686858][ T6285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.692568][ T6285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.828498][ T5801] usb 6-1: Using ep0 maxpacket: 8 [ 142.835429][ T5801] usb 6-1: config 0 has an invalid interface number: 186 but max is 0 [ 142.838142][ T5801] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.841719][ T5801] usb 6-1: config 0 has no interface number 0 [ 142.843646][ T5801] usb 6-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 142.846917][ T5801] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 142.850620][ T5801] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 142.856054][ T5801] usb 6-1: config 0 interface 186 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 142.866285][ T5801] usb 6-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 142.870014][ T5801] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.872576][ T5801] usb 6-1: Product: syz [ 142.873902][ T5801] usb 6-1: Manufacturer: syz [ 142.875399][ T5801] usb 6-1: SerialNumber: syz [ 142.880823][ T5801] usb 6-1: config 0 descriptor?? [ 142.883764][ T7425] FAULT_INJECTION: forcing a failure. [ 142.883764][ T7425] name failslab, interval 1, probability 0, space 0, times 0 [ 142.885047][ T5801] iowarrior 6-1:0.186: no interrupt-in endpoint found [ 142.887778][ T7425] CPU: 0 UID: 0 PID: 7425 Comm: syz.0.475 Not tainted syzkaller #0 PREEMPT(full) [ 142.887793][ T7425] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 142.887800][ T7425] Call Trace: [ 142.887804][ T7425] [ 142.887809][ T7425] dump_stack_lvl+0x100/0x190 [ 142.887827][ T7425] should_fail_ex.cold+0x5/0xa [ 142.887840][ T7425] should_failslab+0xc2/0x120 [ 142.887857][ T7425] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 142.887873][ T7425] ? __alloc_skb+0x5b7/0x710 [ 142.887888][ T7425] ? __alloc_skb+0x140/0x710 [ 142.887905][ T7425] __alloc_skb+0x140/0x710 [ 142.887919][ T7425] ? __alloc_skb+0x5b7/0x710 [ 142.887933][ T7425] ? __pfx___alloc_skb+0x10/0x10 [ 142.887946][ T7425] ? find_held_lock+0x2b/0x80 [ 142.887960][ T7425] ? is_bpf_text_address+0x8a/0x1a0 [ 142.887977][ T7425] ? is_bpf_text_address+0x8a/0x1a0 [ 142.887992][ T7425] ? bpf_ksym_find+0x124/0x1c0 [ 142.888006][ T7425] alloc_skb_with_frags+0xdd/0x760 [ 142.888028][ T7425] sock_alloc_send_pskb+0x801/0x980 [ 142.888047][ T7425] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 142.888064][ T7425] ? __lock_acquire+0x49f/0x1a40 [ 142.888084][ T7425] __ip_append_data+0x20d3/0x44d0 [ 142.888104][ T7425] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 142.888117][ T7425] ? find_held_lock+0x2b/0x80 [ 142.888135][ T7425] ? ip_dst_mtu_maybe_forward.constprop.0+0x3e9/0x750 [ 142.888153][ T7425] ? __pfx___ip_append_data+0x10/0x10 [ 142.888167][ T7425] ? dst_alloc+0xc0/0x1a0 [ 142.888184][ T7425] ip_make_skb+0x28b/0x310 [ 142.888215][ T7425] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 142.888230][ T7425] ? __pfx_ip_make_skb+0x10/0x10 [ 142.888244][ T7425] ? ip_route_output_key_hash+0x14c/0x2b0 [ 142.888271][ T7425] ? udp_sendmsg+0x171c/0x2720 [ 142.888285][ T7425] udp_sendmsg+0x171c/0x2720 [ 142.888304][ T7425] ? __pfx_udp_sendmsg+0x10/0x10 [ 142.888317][ T7425] ? __lock_acquire+0x49f/0x1a40 [ 142.888339][ T7425] ? __pfx___might_resched+0x10/0x10 [ 142.888360][ T7425] ? aa_sk_perm+0x309/0xaa0 [ 142.888378][ T7425] ? __pfx_aa_sk_perm+0x10/0x10 [ 142.888397][ T7425] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 142.888409][ T7425] ? __pfx_udp_sendmsg+0x10/0x10 [ 142.888423][ T7425] inet_sendmsg+0x105/0x140 [ 142.888442][ T7425] ____sys_sendmsg+0x9c9/0xbe0 [ 142.888453][ T7425] ? __pfx_inet_sendmsg+0x10/0x10 [ 142.888470][ T7425] ? __pfx_____sys_sendmsg+0x10/0x10 [ 142.888484][ T7425] ? _kstrtoull+0x13c/0x1f0 [ 142.888497][ T7425] ? __pfx__kstrtoull+0x10/0x10 [ 142.888510][ T7425] ___sys_sendmsg+0x190/0x1e0 [ 142.888523][ T7425] ? __pfx____sys_sendmsg+0x10/0x10 [ 142.888534][ T7425] ? __lock_acquire+0x49f/0x1a40 [ 142.888568][ T7425] __sys_sendmmsg+0x309/0x440 [ 142.888586][ T7425] ? __pfx___sys_sendmmsg+0x10/0x10 [ 142.888606][ T7425] ? find_held_lock+0x2b/0x80 [ 142.888623][ T7425] ? __mutex_unlock_slowpath+0x35d/0x930 [ 142.888648][ T7425] ? fput+0x79/0x100 [ 142.888662][ T7425] ? ksys_write+0x1ac/0x250 [ 142.888674][ T7425] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 142.888694][ T7425] ? lockdep_hardirqs_on+0x78/0x100 [ 142.888710][ T7425] __do_fast_syscall_32+0xe7/0x970 [ 142.888728][ T7425] ? lockdep_hardirqs_on+0x78/0x100 [ 142.888744][ T7425] do_fast_syscall_32+0x32/0x70 [ 142.888761][ T7425] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 142.888775][ T7425] RIP: 0023:0xf6fdefec [ 142.888788][ T7425] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 142.888793][ T7425] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 142.888805][ T7425] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080004d00 [ 142.888812][ T7425] RDX: 0000000000000284 RSI: 0000000000000f00 RDI: 0000000000000000 [ 142.888818][ T7425] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 142.888824][ T7425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.888831][ T7425] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 142.888844][ T7425] [ 143.043339][ T7428] fuse: Unknown parameter '000000000000000000000030x0000000000000003' [ 143.222348][ T7415] lo speed is unknown, defaulting to 1000 [ 143.795653][ T7447] team0: entered allmulticast mode [ 143.797559][ T7447] team_slave_0: entered allmulticast mode [ 143.799770][ T7447] team_slave_1: entered allmulticast mode [ 143.876504][ T7450] netlink: 64 bytes leftover after parsing attributes in process `syz.2.482'. [ 143.882784][ T7449] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 143.926767][ T6285] usb 6-1: USB disconnect, device number 19 [ 144.263825][ T27] process 7444 (syz.3.481) no longer affine to cpu1 [ 144.263916][ C1] process 7443 (syz.3.481) no longer affine to cpu1 [ 144.311662][ T7460] smpboot: CPU 1 is now offline [ 144.633529][ T7443] process 7449 (syz.3.481) no longer affine to cpu1 [ 144.651113][ T7460] smpboot: CPU 3 is now offline [ 145.301722][ T7468] netlink: 152 bytes leftover after parsing attributes in process `syz.1.487'. [ 145.332020][ T7464] siw: device registration error -23 [ 145.443773][ T7471] siw: device registration error -23 [ 145.518480][ T7472] scsi host6: ib_srp: Connection 0/2 to 0.0.0.0 failed [ 145.556027][ T7477] net_ratelimit: 619 callbacks suppressed [ 145.556041][ T7477] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 145.831177][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.010697][ T7481] siw: device registration error -23 [ 146.171323][ T7484] scsi host6: ib_srp: Connection 0/2 to 0.0.0.0 failed [ 146.218337][ T10] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 146.244194][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.392563][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 146.403128][ T10] usb 7-1: config 0 has an invalid interface number: 186 but max is 0 [ 146.405978][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.409840][ T10] usb 7-1: config 0 has no interface number 0 [ 146.412595][ T10] usb 7-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 146.416754][ T10] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 146.428582][ T10] usb 7-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 146.431773][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.440602][ T10] usb 7-1: Product: syz [ 146.442117][ T10] usb 7-1: Manufacturer: syz [ 146.443875][ T10] usb 7-1: SerialNumber: syz [ 146.447167][ T10] usb 7-1: config 0 descriptor?? [ 146.460547][ T10] iowarrior 7-1:0.186: no interrupt-in endpoint found [ 146.468692][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.471818][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.490724][ T7491] siw: device registration error -23 [ 146.543573][ T7493] siw: device registration error -23 [ 146.556170][ T7494] scsi host6: ib_srp: Connection 0/2 to 0.0.0.0 failed [ 146.600264][ T7498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.603334][ T7498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.606196][ T7498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.612881][ T7498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.615818][ T7498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.677933][ T7499] scsi host7: ib_srp: Connection 0/2 to 0.0.0.0 failed [ 146.884705][ T7483] lo speed is unknown, defaulting to 1000 [ 146.979813][ T7505] siw: device registration error -23 [ 147.053243][ T7513] scsi host6: ib_srp: Connection 0/2 to 0.0.0.0 failed [ 147.291819][ T6285] usb 7-1: USB disconnect, device number 19 [ 147.455213][ T5736] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 147.646304][ T7518] configfs-gadget.g1 gadget.0: HOST MAC 8e:7f:16:5a:94:04 [ 147.656446][ T7518] configfs-gadget.g1 gadget.0: MAC 0e:92:fc:a7:b4:ef [ 147.908359][ T5878] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 148.059233][ T5878] usb 5-1: Dual-Role OTG device on HNP port [ 148.064645][ T5878] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 148.072922][ T5878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.094331][ T5878] gspca_main: spca501-2.14.0 probing 0000:0000 [ 148.103647][ T5878] gspca_spca501: reg write: error -32 [ 148.108941][ T5878] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 148.117022][ T5878] spca501 5-1:1.0: probe with driver spca501 failed with error -22 [ 148.153076][ T7557] netlink: 152 bytes leftover after parsing attributes in process `syz.2.505'. [ 148.255541][ T7559] netlink: 12 bytes leftover after parsing attributes in process `syz.3.504'. [ 148.382992][ T7561] siw: device registration error -23 [ 148.595471][ T7566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.617158][ T7566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.676047][ T7559] netlink: 12 bytes leftover after parsing attributes in process `syz.3.504'. [ 149.411415][ T5878] cdc_ether 5-1:1.2 usb1: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 8e:7f:16:5a:94:04 [ 149.572061][ T7559] netlink: 12 bytes leftover after parsing attributes in process `syz.3.504'. [ 149.590021][ T7578] netlink: 'syz.2.507': attribute type 21 has an invalid length. [ 149.621113][ T7578] netlink: 128 bytes leftover after parsing attributes in process `syz.2.507'. [ 149.655602][ T7578] netlink: 3 bytes leftover after parsing attributes in process `syz.2.507'. [ 150.628563][ C0] net_ratelimit: 359 callbacks suppressed [ 150.628579][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.411585][ T7597] netlink: 12 bytes leftover after parsing attributes in process `syz.2.509'. [ 151.429766][ T1479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.702205][ T7609] netlink: 152 bytes leftover after parsing attributes in process `syz.0.516'. [ 151.765328][ T7610] netlink: 20 bytes leftover after parsing attributes in process `syz.3.515'. [ 151.797827][ T5734] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 151.807787][ T5734] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 151.817039][ T5734] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 151.822931][ T5734] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 151.833466][ T5734] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 151.923423][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.033554][ T5737] ffs_data_put(): freeing [ 152.203430][ T7621] siw: device registration error -23 [ 152.338608][ T850] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 152.390474][ T7623] scsi host6: ib_srp: Connection 0/2 to 0.0.0.0 failed [ 152.499298][ T850] usb 8-1: Using ep0 maxpacket: 8 [ 152.504989][ T850] usb 8-1: config 0 has an invalid interface number: 186 but max is 0 [ 152.511851][ T850] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.521332][ T850] usb 8-1: config 0 has no interface number 0 [ 152.527332][ T850] usb 8-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 152.536836][ T850] usb 8-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 152.546580][ T850] usb 8-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 152.547503][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.575614][ T850] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.606261][ T850] usb 8-1: Product: syz [ 152.607671][ T850] usb 8-1: Manufacturer: syz [ 152.619062][ T850] usb 8-1: SerialNumber: syz [ 152.630767][ T850] usb 8-1: config 0 descriptor?? [ 152.646556][ T850] iowarrior 8-1:0.186: no interrupt-in endpoint found [ 152.739648][ T7611] lo speed is unknown, defaulting to 1000 [ 153.120225][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.186770][ T7622] lo speed is unknown, defaulting to 1000 [ 153.316735][ T7611] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.321639][ T7611] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.325953][ T7611] bridge_slave_0: entered allmulticast mode [ 153.331029][ T7611] bridge_slave_0: entered promiscuous mode [ 153.347475][ T7611] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.355221][ T7611] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.362965][ T7611] bridge_slave_1: entered allmulticast mode [ 153.372529][ T7611] bridge_slave_1: entered promiscuous mode [ 153.433339][ T7655] netlink: 16 bytes leftover after parsing attributes in process `syz.0.523'. [ 153.445311][ T7611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.459634][ T7611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.512817][ T7611] team0: Port device team_slave_0 added [ 153.517365][ T7611] team0: Port device team_slave_1 added [ 153.585220][ T7611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.591086][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.596509][ T7611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 153.612881][ T7660] netlink: 'syz.0.525': attribute type 21 has an invalid length. [ 153.615484][ T7611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.621227][ T7660] netlink: 128 bytes leftover after parsing attributes in process `syz.0.525'. [ 153.627557][ T7611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.630387][ T7611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 153.640399][ T7611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.644766][ T7660] netlink: 3 bytes leftover after parsing attributes in process `syz.0.525'. [ 153.918586][ T5734] Bluetooth: hci0: command tx timeout [ 153.962424][ T7611] hsr_slave_0: entered promiscuous mode [ 153.966574][ T7611] hsr_slave_1: entered promiscuous mode [ 153.979046][ T7611] debugfs: 'hsr0' already exists in 'hsr' [ 153.979066][ T7611] Cannot create hsr debugfs directory [ 154.166691][ T7662] CIFS: Attempting to mount //::1/share [ 154.209331][ T7665] netlink: 14 bytes leftover after parsing attributes in process `syz.2.524'. [ 154.501829][ T7662] CIFS: VFS: cifs_mount failed w/return code = -112 [ 154.592611][ T7611] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 154.637212][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.643559][ T7611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 154.646566][ T7611] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 154.661731][ T7611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 154.664749][ T7611] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 154.678708][ T7611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 154.681622][ T7611] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 154.695485][ T7611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 154.719535][ T7671] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 154.750962][ T5732] ffs_data_put(): freeing [ 154.877351][ T7611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.952645][ T7611] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.969786][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.972162][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.975428][ T7682] bochs-drm 0000:00:01.0: [drm] Unknown color mode 6; guessing buffer size. [ 155.007018][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.009289][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.186892][ T60] usb 8-1: USB disconnect, device number 19 [ 155.668701][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.737176][ T7611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.998600][ T5734] Bluetooth: hci0: command tx timeout [ 156.151358][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.205819][ T7611] veth0_vlan: entered promiscuous mode [ 156.229571][ T7611] veth1_vlan: entered promiscuous mode [ 156.314844][ T7611] veth0_macvtap: entered promiscuous mode [ 156.343268][ T7611] veth1_macvtap: entered promiscuous mode [ 156.359057][ T7611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.379471][ T7611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.390947][ T5808] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.396086][ T5808] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.436752][ T7706] siw: device registration error -23 [ 156.451080][ T5780] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.465227][ T5780] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.511536][ T222] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.519152][ T222] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.543868][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.547018][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.553782][ T7711] scsi host6: ib_srp: Connection 0/2 to 0.0.0.0 failed [ 156.744219][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.975944][ T7719] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 156.990372][ T7720] netlink: 'syz.3.532': attribute type 21 has an invalid length. [ 156.992979][ T7720] netlink: 128 bytes leftover after parsing attributes in process `syz.3.532'. [ 156.996220][ T7720] netlink: 3 bytes leftover after parsing attributes in process `syz.3.532'. [ 158.068347][ T5734] Bluetooth: hci0: command tx timeout [ 158.723379][ T1479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.730840][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.086857][ T7739] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 159.909324][ T1479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.935150][ T7740] netlink: 'syz.0.536': attribute type 5 has an invalid length. [ 160.190675][ T7695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.218282][ T5734] Bluetooth: hci0: command tx timeout [ 160.760275][ T7747] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 160.951768][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.503454][ T42] audit: type=1326 audit(1786129575.535:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7751 comm="syz.0.539" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x0 [ 161.686740][ T7756] loop2: detected capacity change from 0 to 7 [ 161.951969][ T7756] Dev loop2: unable to read RDB block 7 [ 161.963238][ T7756] loop2: unable to read partition table [ 161.970625][ T7756] loop2: partition table beyond EOD, truncated [ 161.987979][ T7756] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 163.030663][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.637278][ T7730] lo speed is unknown, defaulting to 1000 [ 163.672418][ T7759] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 163.941882][ T7766] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 164.040848][ T5809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.069734][ T1479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.128126][ T7773] netlink: 'syz.3.541': attribute type 21 has an invalid length. [ 164.142536][ T7773] netlink: 128 bytes leftover after parsing attributes in process `syz.3.541'. [ 164.177639][ T7777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.694575][ T7777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.109998][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.167152][ T7773] netlink: 3 bytes leftover after parsing attributes in process `syz.3.541'. [ 165.275278][ T7777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.289143][ T7777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.129972][ T7812] netlink: 32 bytes leftover after parsing attributes in process `syz.2.548'. [ 166.302617][ T7611] ffs_data_put(): freeing [ 166.388952][ T7710] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 166.518332][ T7710] usb 7-1: device descriptor read/64, error -71 [ 166.634524][ T1479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.707376][ T7813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.547'. [ 166.788361][ T7710] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 166.800644][ T7830] netlink: 'syz.3.552': attribute type 21 has an invalid length. [ 166.822747][ T7830] netlink: 128 bytes leftover after parsing attributes in process `syz.3.552'. [ 166.835878][ T7830] netlink: 3 bytes leftover after parsing attributes in process `syz.3.552'. [ 166.948578][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.948735][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.051866][ T7710] usb 7-1: device descriptor read/64, error -71 [ 167.110162][ T6285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.302135][ T7710] usb usb7-port1: attempt power cycle [ 167.669231][ T1479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.758496][ T7841] netlink: 'syz.3.553': attribute type 21 has an invalid length. [ 167.764237][ T7841] netlink: 128 bytes leftover after parsing attributes in process `syz.3.553'. [ 167.768915][ T7710] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 167.800131][ T7710] usb 7-1: device descriptor read/8, error -71 [ 167.828818][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.868883][ T7841] netlink: 3 bytes leftover after parsing attributes in process `syz.3.553'. [ 168.038321][ T7710] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 168.058788][ T7710] usb 7-1: device descriptor read/8, error -71 [ 168.178531][ T7710] usb usb7-port1: unable to enumerate USB device [ 168.401993][ T7851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.410905][ T7851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.411447][ T7851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.478768][ T7850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.795558][ T7856] CIFS: Attempting to mount //::1/share [ 168.811792][ T7856] CIFS: VFS: Error connecting to socket. Aborting operation. [ 168.820250][ T7856] CIFS: VFS: cifs_mount failed w/return code = -111 [ 169.087487][ T7866] netlink: 'syz.2.561': attribute type 21 has an invalid length. [ 169.105890][ T7866] netlink: 128 bytes leftover after parsing attributes in process `syz.2.561'. [ 169.110225][ T66] block nbd3: Receive control failed (result -107) [ 169.146014][ T7866] netlink: 3 bytes leftover after parsing attributes in process `syz.2.561'. [ 169.261076][ T7859] block nbd3: shutting down sockets [ 169.780516][ T7879] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 171.543814][ T7895] Console: switching to colour dummy device 80x25 [ 171.573409][ T7896] Bluetooth: MGMT ver 1.23 [ 172.034538][ T7907] net_ratelimit: 7 callbacks suppressed [ 172.034553][ T7907] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 172.229205][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.896990][ T7911] kernel profiling enabled (shift: 7) [ 173.268615][ T1479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.370794][ T7909] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 173.390904][ T7909] netlink: 512 bytes leftover after parsing attributes in process `syz.2.572'. [ 173.595523][ T7710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.690611][ T7924] netlink: 152 bytes leftover after parsing attributes in process `syz.3.575'. [ 173.845596][ T7928] siw: device registration error -23 [ 174.113489][ T7934] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 174.881715][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.526262][ T7937] 9p: Bad value for 'rfdno' [ 175.552747][ T7939] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.909240][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.969695][ T7952] FAULT_INJECTION: forcing a failure. [ 175.969695][ T7952] name failslab, interval 1, probability 0, space 0, times 0 [ 175.975182][ T7948] scsi host6: ib_srp: Connection 0/2 to 0.0.0.0 failed [ 175.975369][ T7952] CPU: 2 UID: 0 PID: 7952 Comm: syz.3.583 Not tainted syzkaller #0 PREEMPT(full) [ 175.975384][ T7952] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 175.975392][ T7952] Call Trace: [ 175.975397][ T7952] [ 175.975402][ T7952] dump_stack_lvl+0x100/0x190 [ 175.975422][ T7952] should_fail_ex.cold+0x5/0xa [ 175.975435][ T7952] should_failslab+0xc2/0x120 [ 175.975452][ T7952] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 175.975468][ T7952] ? __alloc_skb+0x140/0x710 [ 175.975501][ T7952] __alloc_skb+0x140/0x710 [ 175.975515][ T7952] ? __alloc_skb+0x5b7/0x710 [ 175.975529][ T7952] ? __pfx___alloc_skb+0x10/0x10 [ 175.975544][ T7952] ? find_held_lock+0x2b/0x80 [ 175.975562][ T7952] netlink_dump+0x194/0xd00 [ 175.975576][ T7952] ? ip_set_dump_start+0x2e9/0x460 [ 175.975595][ T7952] ? __pfx_netlink_dump+0x10/0x10 [ 175.975616][ T7952] __netlink_dump_start+0x6d6/0x990 [ 175.975630][ T7952] ip_set_dump+0x1c2/0x200 [ 175.975645][ T7952] ? __pfx_ip_set_dump+0x10/0x10 [ 175.975660][ T7952] ? __pfx_ip_set_dump_start+0x10/0x10 [ 175.975677][ T7952] ? __pfx_ip_set_dump_do+0x10/0x10 [ 175.975694][ T7952] ? __pfx_ip_set_dump_done+0x10/0x10 [ 175.975717][ T7952] nfnetlink_rcv_msg+0x9d5/0x11e0 [ 175.975739][ T7952] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 175.975755][ T7952] ? skb_release_data+0x6ca/0x8e0 [ 175.975772][ T7952] ? kfree_skbmem+0x19f/0x210 [ 175.975797][ T7952] ? __pfx___dev_queue_xmit+0x10/0x10 [ 175.975814][ T7952] netlink_rcv_skb+0x159/0x420 [ 175.975827][ T7952] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 175.975844][ T7952] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 175.975863][ T7952] ? ns_capable+0xd2/0xf0 [ 175.975877][ T7952] nfnetlink_rcv+0x1b3/0x440 [ 175.975893][ T7952] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 175.975909][ T7952] ? netlink_deliver_tap+0x1ae/0xcc0 [ 175.975923][ T7952] netlink_unicast+0x585/0x850 [ 175.975938][ T7952] ? __pfx_netlink_unicast+0x10/0x10 [ 175.975955][ T7952] netlink_sendmsg+0x8b0/0xda0 [ 175.975969][ T7952] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.975984][ T7952] ? apparmor_socket_sendmsg+0x15b/0x270 [ 175.976000][ T7952] ____sys_sendmsg+0xa4d/0xbe0 [ 175.976011][ T7952] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.976025][ T7952] ? __pfx_____sys_sendmsg+0x10/0x10 [ 175.976038][ T7952] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 175.976062][ T7952] ___sys_sendmsg+0x190/0x1e0 [ 175.976075][ T7952] ? __pfx____sys_sendmsg+0x10/0x10 [ 175.976099][ T7952] ? find_held_lock+0x2b/0x80 [ 175.976122][ T7952] __sys_sendmsg+0x160/0x210 [ 175.976139][ T7952] ? __pfx___sys_sendmsg+0x10/0x10 [ 175.976163][ T7952] __do_fast_syscall_32+0xe7/0x970 [ 175.976184][ T7952] do_fast_syscall_32+0x32/0x70 [ 175.976201][ T7952] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 175.976215][ T7952] RIP: 0023:0xf7fe7fec [ 175.976230][ T7952] Code: Unable to access opcode bytes at 0xf7fe7fc2. [ 175.976235][ T7952] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 175.976247][ T7952] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 175.976254][ T7952] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 175.976260][ T7952] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 175.976266][ T7952] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 175.976273][ T7952] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 175.976287][ T7952] [ 176.105124][ T7957] netlink: 'syz.3.585': attribute type 21 has an invalid length. [ 176.107748][ T7957] netlink: 128 bytes leftover after parsing attributes in process `syz.3.585'. [ 176.111240][ T7957] netlink: 3 bytes leftover after parsing attributes in process `syz.3.585'. [ 176.640578][ T7710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.958598][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.324882][ T7963] scsi host6: ib_srp: Connection 0/2 to 0.0.0.0 failed [ 177.430222][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.681611][ T7947] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 177.723357][ T7947] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref] [ 177.727039][ T7947] pci 0000:00:01.0: BAR 2 [mem 0xfeaf4000-0xfeaf4fff] [ 177.730709][ T7947] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 177.739535][ T7947] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 177.767433][ T7947] pci 0000:00:01.0: Adding to iommu group 1 [ 177.780071][ T7947] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 177.782327][ T7947] pci 0000:00:01.0: vgaarb: bridge control possible [ 177.784388][ T7947] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 177.806506][ T7947] pci 0000:00:1d.0: [8086:2934] type 00 class 0x0c0300 conventional PCI endpoint [ 177.831776][ T7947] pci 0000:00:1d.0: BAR 4 [io 0xc0e0-0xc0ff] [ 177.894028][ T7947] pci 0000:00:1d.0: Adding to iommu group 7 [ 177.957250][ T7947] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 177.993205][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.002214][ T7947] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 178.007606][ T7947] pci 0000:00:1d.0: BAR 4 [io 0x2000-0x201f]: assigned [ 178.064667][ T7947] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 178.108153][ T7947] [drm] Found bochs VGA, ID 0xb0c5. [ 178.113129][ T7947] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 178.129844][ T7947] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4 [ 178.247678][ T7947] pci 0000:00:1d.0: quirk_usb_early_handoff+0x0/0x1360 took 71884 usecs [ 178.343163][ T7947] uhci_hcd 0000:00:1d.0: UHCI Host Controller [ 178.374503][ T7947] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 2 [ 178.383597][ T7947] uhci_hcd 0000:00:1d.0: detected 2 ports [ 178.407757][ T7947] uhci_hcd 0000:00:1d.0: irq 16, io port 0x00002000 [ 178.442225][ T7947] usb usb2: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.02 [ 178.457930][ T7947] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 178.468784][ T7947] usb usb2: Product: UHCI Host Controller [ 178.484885][ T7947] usb usb2: Manufacturer: Linux syzkaller uhci_hcd [ 178.494017][ T7947] usb usb2: SerialNumber: 0000:00:1d.0 [ 178.602346][ T7947] hub 2-0:1.0: USB hub found [ 178.644998][ T7947] hub 2-0:1.0: 2 ports detected [ 178.860956][ T7979] netlink: 'syz.2.591': attribute type 21 has an invalid length. [ 178.873229][ T7981] netlink: 96 bytes leftover after parsing attributes in process `syz.0.590'. [ 178.884691][ T7979] netlink: 128 bytes leftover after parsing attributes in process `syz.2.591'. [ 178.905866][ T7979] netlink: 3 bytes leftover after parsing attributes in process `syz.2.591'. [ 179.633947][ T7998] scsi host6: ib_srp: Connection 0/2 to 0.0.0.0 failed [ 179.655078][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.670362][ T7710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.003476][ T5732] ffs_data_put(): freeing [ 180.078792][ T8010] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.708770][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.959611][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.291099][ T7710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.351449][ T8032] netlink: 'syz.4.603': attribute type 21 has an invalid length. [ 182.367610][ T8032] netlink: 128 bytes leftover after parsing attributes in process `syz.4.603'. [ 182.384727][ T8032] netlink: 3 bytes leftover after parsing attributes in process `syz.4.603'. [ 182.490912][ T8036] FAULT_INJECTION: forcing a failure. [ 182.490912][ T8036] name failslab, interval 1, probability 0, space 0, times 0 [ 182.494888][ T8036] CPU: 0 UID: 0 PID: 8036 Comm: syz.2.605 Not tainted syzkaller #0 PREEMPT(full) [ 182.494906][ T8036] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 182.494920][ T8036] Call Trace: [ 182.494927][ T8036] [ 182.494933][ T8036] dump_stack_lvl+0x100/0x190 [ 182.494980][ T8036] should_fail_ex.cold+0x5/0xa [ 182.495000][ T8036] should_failslab+0xc2/0x120 [ 182.495024][ T8036] __kmalloc_noprof+0xfc/0x820 [ 182.495039][ T8036] ? alloc_pipe_info+0x1ec/0x590 [ 182.495054][ T8036] alloc_pipe_info+0x1ec/0x590 [ 182.495067][ T8036] splice_direct_to_actor+0x78f/0xa30 [ 182.495080][ T8036] ? __lock_acquire+0x49f/0x1a40 [ 182.495104][ T8036] ? __pfx_direct_splice_actor+0x10/0x10 [ 182.495117][ T8036] ? __pfx_aa_file_perm+0x10/0x10 [ 182.495175][ T8036] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 182.495188][ T8036] ? __lock_acquire+0x49f/0x1a40 [ 182.495208][ T8036] do_splice_direct+0x174/0x240 [ 182.495220][ T8036] ? __pfx_do_splice_direct+0x10/0x10 [ 182.495233][ T8036] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 182.495249][ T8036] vfs_copy_file_range+0xc1b/0x1840 [ 182.495266][ T8036] ? __pfx_vfs_copy_file_range+0x10/0x10 [ 182.495281][ T8036] ? __fget_files+0x21f/0x3d0 [ 182.495296][ T8036] __do_sys_copy_file_range+0x1a1/0x460 [ 182.495311][ T8036] ? __pfx___do_sys_copy_file_range+0x10/0x10 [ 182.495325][ T8036] ? fput+0x79/0x100 [ 182.495337][ T8036] ? ksys_write+0x1ac/0x250 [ 182.495348][ T8036] ? __pfx_ksys_write+0x10/0x10 [ 182.495361][ T8036] __do_fast_syscall_32+0xe7/0x970 [ 182.495436][ T8036] ? lockdep_hardirqs_on+0x78/0x100 [ 182.495453][ T8036] do_fast_syscall_32+0x32/0x70 [ 182.495470][ T8036] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 182.495486][ T8036] RIP: 0023:0xf70befec [ 182.495502][ T8036] Code: Unable to access opcode bytes at 0xf70befc2. [ 182.495515][ T8036] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000179 [ 182.495527][ T8036] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000000000000 [ 182.495534][ T8036] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 00000000e003e45c [ 182.495541][ T8036] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 182.495547][ T8036] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 182.495553][ T8036] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 182.495567][ T8036] [ 182.652560][ T5737] ffs_data_put(): freeing [ 183.003718][ T8052] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.048352][ T8055] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 183.795526][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.138818][ T7710] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 184.172188][ T8062] erofs (device sr0): cannot find valid erofs superblock [ 184.298356][ T7710] usb 8-1: Using ep0 maxpacket: 8 [ 184.301701][ T7710] usb 8-1: config 0 has an invalid interface number: 186 but max is 0 [ 184.304368][ T7710] usb 8-1: config 0 has no interface number 0 [ 184.306350][ T7710] usb 8-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 184.312803][ T7710] usb 8-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 184.321645][ T7710] usb 8-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 184.333686][ T7710] usb 8-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 184.346494][ T7710] usb 8-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 184.358179][ T7710] usb 8-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 184.371221][ T7710] usb 8-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 184.376099][ T7710] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.389290][ T8067] read descriptors [ 184.395381][ T7710] usb 8-1: Product: syz [ 184.399004][ T7710] usb 8-1: Manufacturer: syz [ 184.402573][ T7710] usb 8-1: SerialNumber: syz [ 184.408679][ T7710] usb 8-1: config 0 descriptor?? [ 184.422597][ T5731] ffs_data_put(): freeing [ 184.869135][ T1479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.156700][ T8070] lo speed is unknown, defaulting to 1000 [ 185.359684][ T850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.805884][ T8059] lo speed is unknown, defaulting to 1000 [ 185.908689][ T1479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.178932][ T7710] iowarrior 8-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 186.215465][ T7710] usb 8-1: USB disconnect, device number 20 [ 186.399457][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.402184][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.809620][ T8106] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 187.056273][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.417245][ T8099] CIFS: Attempting to mount //::1/share [ 187.445471][ T8099] CIFS: VFS: Error connecting to socket. Aborting operation. [ 187.457863][ T8099] CIFS: VFS: cifs_mount failed w/return code = -111 [ 187.749489][ T5736] Bluetooth: hci0: command tx timeout [ 187.765553][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.063906][ T8113] netlink: 4 bytes leftover after parsing attributes in process `syz.3.628'. [ 188.390065][ T7710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.414069][ T8117] e1000e 0000:00:02.0 eth1: removed PHC [ 188.788795][ T1479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.826869][ T8117] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 188.949005][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.960943][ T1479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.963560][ T1479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.531414][ T8140] loop6: detected capacity change from 0 to 2640 [ 189.543733][ T8140] Buffer I/O error on dev loop6, logical block 0, async page read [ 189.566866][ T8140] Buffer I/O error on dev loop6, logical block 0, async page read [ 189.594395][ T8140] Buffer I/O error on dev loop6, logical block 0, async page read [ 189.645885][ T8140] Buffer I/O error on dev loop6, logical block 0, async page read [ 189.670292][ T8140] Buffer I/O error on dev loop6, logical block 0, async page read [ 189.679266][ T8140] Buffer I/O error on dev loop6, logical block 0, async page read [ 189.681883][ T8140] Buffer I/O error on dev loop6, logical block 0, async page read [ 189.684378][ T8140] Buffer I/O error on dev loop6, logical block 0, async page read [ 189.686807][ T8140] ldm_validate_partition_table(): Disk read failed. [ 189.689002][ T8140] Buffer I/O error on dev loop6, logical block 0, async page read [ 189.691535][ T8140] Buffer I/O error on dev loop6, logical block 0, async page read [ 189.694056][ T8140] Dev loop6: unable to read RDB block 0 [ 189.696238][ T8140] loop6: unable to read partition table [ 189.698258][ T8140] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 189.721610][ T8144] netlink: 152 bytes leftover after parsing attributes in process `syz.4.636'. [ 189.765985][ T8144] siw: device registration error -23 [ 189.830074][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.184543][ T8165] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 190.824642][ T8172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.845101][ T8172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.894341][ T8172] vivid-000: disconnect [ 190.914187][ T8170] vivid-000: reconnect [ 191.073299][ T1479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.098284][ T6285] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 191.228451][ T6285] usb 7-1: device descriptor read/64, error -71 [ 191.429839][ T850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.490643][ T6285] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 191.708394][ T6285] usb 7-1: device descriptor read/64, error -71 [ 191.821840][ T6285] usb usb7-port1: attempt power cycle [ 191.983392][ T8207] netlink: 152 bytes leftover after parsing attributes in process `syz.4.646'. [ 191.992255][ T8207] siw: device registration error -23 [ 192.038659][ T42] audit: type=1326 audit(1786129606.085:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8208 comm="syz.4.647" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe7fec code=0x0 [ 192.144884][ T8210] loop2: detected capacity change from 0 to 7 [ 192.149847][ T8210] Dev loop2: unable to read RDB block 7 [ 192.152005][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.156655][ T8210] loop2: unable to read partition table [ 192.158933][ T8210] loop2: partition table beyond EOD, truncated [ 192.161450][ T8210] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 192.168425][ T6285] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 192.199153][ T6285] usb 7-1: device descriptor read/8, error -71 [ 192.441246][ T6285] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 192.479023][ T6285] usb 7-1: device descriptor read/8, error -71 [ 192.666654][ T6285] usb usb7-port1: unable to enumerate USB device [ 192.794347][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.968842][ T8224] can0: slcan on ptm0. [ 193.351543][ T8223] can0 (unregistered): slcan off ptm0. [ 193.625948][ T8244] siw: device registration error -23 [ 193.759805][ T8248] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 194.171303][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.179198][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.388112][ T8250] FAULT_INJECTION: forcing a failure. [ 194.388112][ T8250] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.438131][ T8250] CPU: 2 UID: 0 PID: 8250 Comm: syz.2.657 Not tainted syzkaller #0 PREEMPT(full) [ 194.438151][ T8250] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 194.438158][ T8250] Call Trace: [ 194.438163][ T8250] [ 194.438167][ T8250] dump_stack_lvl+0x100/0x190 [ 194.438186][ T8250] should_fail_ex.cold+0x5/0xa [ 194.438213][ T8250] _copy_from_user+0x2e/0xd0 [ 194.438242][ T8250] kstrtouint_from_user+0xd6/0x1d0 [ 194.438256][ T8250] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 194.438269][ T8250] ? __lock_acquire+0x49f/0x1a40 [ 194.438293][ T8250] proc_fail_nth_write+0x83/0x220 [ 194.438318][ T8250] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 194.438339][ T8250] vfs_write+0x2aa/0x1050 [ 194.438350][ T8250] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 194.438369][ T8250] ? __pfx_vfs_write+0x10/0x10 [ 194.438378][ T8250] ? find_held_lock+0x2b/0x80 [ 194.438393][ T8250] ? __fget_files+0x215/0x3d0 [ 194.438406][ T8250] ? __fget_files+0x21f/0x3d0 [ 194.438421][ T8250] ksys_write+0x12a/0x250 [ 194.438431][ T8250] ? __pfx_ksys_write+0x10/0x10 [ 194.438446][ T8250] do_int80_emulation+0x14b/0x720 [ 194.438466][ T8250] asm_int80_emulation+0x1a/0x20 [ 194.438478][ T8250] RIP: 0023:0xf71f74eb [ 194.438488][ T8250] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 194.438499][ T8250] RSP: 002b:00000000f54ad4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 194.438512][ T8250] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f54ad5d0 [ 194.438518][ T8250] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 194.438525][ T8250] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 194.438531][ T8250] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 194.438540][ T8250] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 194.438554][ T8250] [ 194.629915][ T5878] net_ratelimit: 1 callbacks suppressed [ 194.629931][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.890105][ T8261] netlink: 16 bytes leftover after parsing attributes in process `syz.4.658'. [ 195.095505][ T8270] netlink: 'syz.4.662': attribute type 21 has an invalid length. [ 195.103724][ T8270] netlink: 128 bytes leftover after parsing attributes in process `syz.4.662'. [ 195.123278][ T8270] netlink: 3 bytes leftover after parsing attributes in process `syz.4.662'. [ 195.391777][ T42] audit: type=1326 audit(1786129609.435:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8275 comm="syz.2.664" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x0 [ 195.670315][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.192855][ T8280] loop2: detected capacity change from 0 to 7 [ 196.197281][ T6285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.201107][ T8280] Dev loop2: unable to read RDB block 7 [ 196.203230][ T8280] loop2: unable to read partition table [ 196.206300][ T8280] loop2: partition table beyond EOD, truncated [ 196.213151][ T8280] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 196.234467][ T8282] FAULT_INJECTION: forcing a failure. [ 196.234467][ T8282] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.246539][ T8282] CPU: 0 UID: 0 PID: 8282 Comm: syz.3.665 Not tainted syzkaller #0 PREEMPT(full) [ 196.246558][ T8282] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 196.246566][ T8282] Call Trace: [ 196.246570][ T8282] [ 196.246575][ T8282] dump_stack_lvl+0x100/0x190 [ 196.246593][ T8282] should_fail_ex.cold+0x5/0xa [ 196.246606][ T8282] _copy_from_user+0x2e/0xd0 [ 196.246624][ T8282] get_compat_msghdr+0xb3/0x480 [ 196.246685][ T8282] ? __pfx_get_compat_msghdr+0x10/0x10 [ 196.246704][ T8282] ? find_held_lock+0x2b/0x80 [ 196.246719][ T8282] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 196.246737][ T8282] ___sys_sendmsg+0x1b6/0x1e0 [ 196.246759][ T8282] ? __pfx____sys_sendmsg+0x10/0x10 [ 196.246770][ T8282] ? do_user_addr_fault+0x7de/0x12f0 [ 196.246791][ T8282] ? lockdep_hardirqs_on+0x78/0x100 [ 196.246808][ T8282] ? irqentry_exit+0x24d/0xa00 [ 196.246828][ T8282] ? __pfx___might_resched+0x10/0x10 [ 196.246846][ T8282] ? __sys_sendmmsg+0x31d/0x440 [ 196.246869][ T8282] __sys_sendmmsg+0x309/0x440 [ 196.246887][ T8282] ? __pfx___sys_sendmmsg+0x10/0x10 [ 196.246903][ T8282] ? find_held_lock+0x2b/0x80 [ 196.246920][ T8282] ? __mutex_unlock_slowpath+0x35d/0x930 [ 196.246943][ T8282] ? fput+0x79/0x100 [ 196.246957][ T8282] ? ksys_write+0x1ac/0x250 [ 196.246969][ T8282] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 196.246988][ T8282] ? lockdep_hardirqs_on+0x78/0x100 [ 196.247003][ T8282] __do_fast_syscall_32+0xe7/0x970 [ 196.247019][ T8282] ? lockdep_hardirqs_on+0x78/0x100 [ 196.247035][ T8282] do_fast_syscall_32+0x32/0x70 [ 196.247052][ T8282] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 196.247067][ T8282] RIP: 0023:0xf7fe7fec [ 196.247083][ T8282] Code: Unable to access opcode bytes at 0xf7fe7fc2. [ 196.247088][ T8282] RSP: 002b:00000000f548550c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 196.247099][ T8282] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080007fc0 [ 196.247106][ T8282] RDX: 000000000800001d RSI: 000000000000001c RDI: 0000000000000000 [ 196.247113][ T8282] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 196.247119][ T8282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.247125][ T8282] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 196.247139][ T8282] [ 196.531983][ T8287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.667'. [ 196.709954][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.741466][ T8294] siw: device registration error -23 [ 196.812212][ T8295] scsi host6: ib_srp: Connection 0/2 to 0.0.0.0 failed [ 196.973867][ T8302] scsi host7: ib_srp: Connection 0/2 to 0.0.0.0 failed [ 197.203189][ T8314] netlink: 'syz.2.675': attribute type 21 has an invalid length. [ 197.216143][ T8314] netlink: 128 bytes leftover after parsing attributes in process `syz.2.675'. [ 197.219874][ T8314] netlink: 3 bytes leftover after parsing attributes in process `syz.2.675'. [ 197.502472][ T8320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.511877][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.579712][ T8320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.592920][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.630281][ T8319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.634937][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.072295][ T42] audit: type=1800 audit(1786129612.115:32): pid=8327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.679" name="enable" dev="configfs" ino=22296 res=0 errno=0 [ 198.088521][ T7695] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 198.162401][ T42] audit: type=1326 audit(1786129612.205:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8328 comm="syz.0.680" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x0 [ 198.260168][ T7695] usb 8-1: Using ep0 maxpacket: 8 [ 198.273829][ T7695] usb 8-1: config 0 has an invalid interface number: 186 but max is 0 [ 198.284116][ T8332] loop2: detected capacity change from 0 to 7 [ 198.286213][ T7695] usb 8-1: config 0 has no interface number 0 [ 198.292132][ T7695] usb 8-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 198.297644][ T8332] Dev loop2: unable to read RDB block 7 [ 198.303263][ T8332] loop2: unable to read partition table [ 198.306134][ T7695] usb 8-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 198.311331][ T8332] loop2: partition table beyond EOD, truncated [ 198.314921][ T7695] usb 8-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 198.320346][ T8332] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 198.332984][ T7695] usb 8-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 198.344939][ T8339] fuse: Bad value for 'rootmode' [ 198.348649][ T7695] usb 8-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 198.351604][ T8340] fuse: Bad value for 'rootmode' [ 198.356774][ T7695] usb 8-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 198.365776][ T7695] usb 8-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 198.368985][ T7695] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.371354][ T8340] tipc: Started in network mode [ 198.371602][ T7695] usb 8-1: Product: syz [ 198.373366][ T8340] tipc: Node identity f6eae83cd3ea, cluster identity 4711 [ 198.375280][ T7695] usb 8-1: Manufacturer: syz [ 198.377005][ T8340] tipc: Enabled bearer , priority 0 [ 198.379000][ T7695] usb 8-1: SerialNumber: syz [ 198.381358][ T8339] tipc: Enabling of bearer rejected, already enabled [ 198.384950][ T7695] usb 8-1: config 0 descriptor?? [ 198.388050][ T8340] syzkaller0: entered promiscuous mode [ 198.390253][ T8340] syzkaller0: entered allmulticast mode [ 198.400875][ T8339] i2c i2c-1: dtv_property_process_set: SET cmd 0x0070bd29 undefined [ 198.407267][ T8339] tipc: Resetting bearer [ 198.415607][ T8338] tipc: Resetting bearer [ 198.443672][ T8338] tipc: Disabling bearer [ 198.569547][ T8343] syzkaller0: entered promiscuous mode [ 198.571428][ T8343] syzkaller0: entered allmulticast mode [ 198.820077][ T5139] Dev loop2: unable to read RDB block 7 [ 198.825750][ T5139] loop2: unable to read partition table [ 198.829922][ T5139] loop2: partition table beyond EOD, truncated [ 199.217981][ T8322] lo speed is unknown, defaulting to 1000 [ 199.884983][ T5878] net_ratelimit: 8 callbacks suppressed [ 199.884997][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.284881][ T8366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.693'. [ 200.316445][ T8366] batadv0: entered promiscuous mode [ 200.330210][ T8366] macsec1: entered promiscuous mode [ 200.334832][ T8366] macsec1: entered allmulticast mode [ 200.350970][ T8366] batadv0: entered allmulticast mode [ 200.357833][ T8366] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 200.363414][ T8366] batadv0: left allmulticast mode [ 200.365206][ T8366] batadv0: left promiscuous mode [ 200.499162][ T8370] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.611394][ T8372] netlink: 'syz.2.695': attribute type 1 has an invalid length. [ 200.839644][ T850] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 200.847905][ T8378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.856927][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.872082][ T8378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.881843][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.887531][ T8377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.890512][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.893427][ T8377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.948745][ T1479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.988972][ T850] usb 9-1: Using ep0 maxpacket: 8 [ 200.996386][ T850] usb 9-1: config 0 has an invalid interface number: 186 but max is 0 [ 200.999211][ T850] usb 9-1: config 0 has no interface number 0 [ 201.002609][ T8380] fuse: Bad value for 'fd' [ 201.004052][ T850] usb 9-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 201.009804][ T850] usb 9-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 201.016178][ T850] usb 9-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 201.029753][ T850] usb 9-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 201.033330][ T850] usb 9-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 201.045100][ T850] usb 9-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 201.053775][ T850] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.056277][ T850] usb 9-1: Product: syz [ 201.057708][ T850] usb 9-1: Manufacturer: syz [ 201.059701][ T850] usb 9-1: SerialNumber: syz [ 201.066084][ T850] usb 9-1: config 0 descriptor?? [ 201.414039][ T8388] macvlan0: entered promiscuous mode [ 201.425281][ T8388] netlink: 'syz.2.701': attribute type 1 has an invalid length. [ 201.433594][ T8388] netlink: 'syz.2.701': attribute type 2 has an invalid length. [ 201.520379][ T7695] iowarrior 8-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 201.549251][ T7695] usb 8-1: USB disconnect, device number 21 [ 201.556203][ T8388] netlink: 'syz.2.701': attribute type 8 has an invalid length. [ 201.661777][ T8388] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 201.965506][ T8374] lo speed is unknown, defaulting to 1000 [ 201.973220][ T8404] scsi host6: ib_srp: Connection 0/2 to 0.0.0.0 failed [ 202.884271][ T850] iowarrior 9-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 202.897935][ T850] usb 9-1: USB disconnect, device number 2 [ 203.151278][ T8428] netlink: 152 bytes leftover after parsing attributes in process `syz.0.713'. [ 204.034227][ T8432] FAULT_INJECTION: forcing a failure. [ 204.034227][ T8432] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.068375][ T8432] CPU: 0 UID: 0 PID: 8432 Comm: syz.2.714 Not tainted syzkaller #0 PREEMPT(full) [ 204.068392][ T8432] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 204.068400][ T8432] Call Trace: [ 204.068404][ T8432] [ 204.068408][ T8432] dump_stack_lvl+0x100/0x190 [ 204.068427][ T8432] should_fail_ex.cold+0x5/0xa [ 204.068441][ T8432] _copy_from_user+0x2e/0xd0 [ 204.068460][ T8432] kstrtouint_from_user+0xd6/0x1d0 [ 204.068473][ T8432] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 204.068486][ T8432] ? __lock_acquire+0x49f/0x1a40 [ 204.068511][ T8432] proc_fail_nth_write+0x83/0x220 [ 204.068528][ T8432] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 204.068549][ T8432] vfs_write+0x2aa/0x1050 [ 204.068560][ T8432] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 204.068582][ T8432] ? __pfx_vfs_write+0x10/0x10 [ 204.068592][ T8432] ? find_held_lock+0x2b/0x80 [ 204.068606][ T8432] ? __fget_files+0x215/0x3d0 [ 204.068620][ T8432] ? __fget_files+0x21f/0x3d0 [ 204.068634][ T8432] ksys_write+0x12a/0x250 [ 204.068644][ T8432] ? __pfx_ksys_write+0x10/0x10 [ 204.068659][ T8432] do_int80_emulation+0x14b/0x720 [ 204.068680][ T8432] asm_int80_emulation+0x1a/0x20 [ 204.068691][ T8432] RIP: 0023:0xf71f74eb [ 204.068701][ T8432] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 204.068712][ T8432] RSP: 002b:00000000f548c4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 204.068724][ T8432] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f548c5d0 [ 204.068731][ T8432] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 204.068737][ T8432] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 204.068744][ T8432] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 204.068750][ T8432] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 204.068764][ T8432] [ 205.110898][ T5878] net_ratelimit: 6 callbacks suppressed [ 205.110946][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.359307][ T7695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.862651][ T8440] Context (ID=0x0) not attached to queue pair (handle=0xffffffff:0x9) [ 205.876449][ T5736] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 205.890248][ T8443] siw: device registration error -23 [ 205.985554][ T8444] scsi host6: ib_srp: Connection 0/2 to 0.0.0.0 failed [ 206.022963][ T42] audit: type=1326 audit(1786129620.065:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8447 comm="syz.0.720" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x0 [ 206.133943][ T8453] loop2: detected capacity change from 0 to 7 [ 206.149441][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.162050][ T8453] Dev loop2: unable to read RDB block 7 [ 206.166511][ T1157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.171775][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.177082][ T8453] loop2: unable to read partition table [ 206.179345][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.183908][ T8453] loop2: partition table beyond EOD, truncated [ 206.192878][ T8453] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 206.334049][ T8452] CIFS: Attempting to mount //::1/share [ 206.427052][ T8463] netlink: 152 bytes leftover after parsing attributes in process `syz.4.725'. [ 206.547826][ T8465] siw: device registration error -23 [ 206.630445][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.633128][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.718168][ T8467] netlink: 152 bytes leftover after parsing attributes in process `syz.2.726'. [ 207.127806][ T5139] Dev loop2: unable to read RDB block 7 [ 207.188754][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.466462][ T5139] loop2: unable to read partition table [ 207.470004][ T8452] CIFS: VFS: cifs_mount failed w/return code = -512 [ 207.480728][ T5139] loop2: partition table beyond EOD, truncated [ 207.502746][ T8468] siw: device registration error -23 [ 208.232788][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.406228][ T8485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.418884][ T8485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.464325][ T8488] siw: device registration error -23 [ 208.536857][ T8489] scsi host6: ib_srp: Connection 0/2 to 0.0.0.0 failed [ 209.053063][ T8496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.057930][ T8496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.790138][ T8500] netlink: 'syz.2.735': attribute type 21 has an invalid length. [ 209.793418][ T8500] netlink: 128 bytes leftover after parsing attributes in process `syz.2.735'. [ 209.804793][ T8500] netlink: 3 bytes leftover after parsing attributes in process `syz.2.735'. [ 210.308627][ T24] net_ratelimit: 6 callbacks suppressed [ 210.308641][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.377019][ T24] usb 5-1: USB disconnect, device number 17 [ 210.761662][ T8497] lo speed is unknown, defaulting to 1000 [ 211.006271][ T24] ================================================================== [ 211.008858][ T24] BUG: KASAN: slab-use-after-free in snd_usb_midi_v2_free+0x52d/0x670 [ 211.011461][ T24] Write of size 8 at addr ffff888070d64350 by task kworker/2:0/24 [ 211.014089][ T24] [ 211.015369][ T24] CPU: 2 UID: 0 PID: 24 Comm: kworker/2:0 Not tainted syzkaller #0 PREEMPT(full) [ 211.015394][ T24] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 211.015411][ T24] Workqueue: usb_hub_wq hub_event [ 211.015444][ T24] Call Trace: [ 211.015454][ T24] [ 211.015460][ T24] dump_stack_lvl+0x100/0x190 [ 211.015476][ T24] print_report+0x13d/0x4b0 [ 211.015502][ T24] ? __virt_addr_valid+0x239/0x430 [ 211.015517][ T24] ? snd_usb_midi_v2_free+0x52d/0x670 [ 211.015537][ T24] kasan_report+0xdf/0x1c0 [ 211.015556][ T24] ? snd_usb_midi_v2_free+0x52d/0x670 [ 211.015577][ T24] snd_usb_midi_v2_free+0x52d/0x670 [ 211.015591][ T24] ? __pfx_snd_ctl_dev_free+0x10/0x10 [ 211.015628][ T24] snd_usb_midi_v2_free_all+0x85/0xe0 [ 211.015650][ T24] snd_usb_audio_free+0x4e/0x120 [ 211.015675][ T24] ? __pfx_snd_usb_audio_free+0x10/0x10 [ 211.015698][ T24] release_card_device+0xb2/0x1a0 [ 211.015713][ T24] ? __pfx_release_card_device+0x10/0x10 [ 211.015731][ T24] device_release+0xd2/0x270 [ 211.015753][ T24] kobject_put+0x1f7/0x640 [ 211.015777][ T24] ? snd_card_disconnect.part.0+0x443/0x5b0 [ 211.015793][ T24] put_device+0x1f/0x30 [ 211.015810][ T24] snd_card_free_when_closed+0x2b/0x40 [ 211.015828][ T24] usb_audio_disconnect+0x210/0x680 [ 211.015851][ T24] usb_unbind_interface+0x1dd/0x9e0 [ 211.015875][ T24] ? __pfx_usb_unbind_interface+0x10/0x10 [ 211.015899][ T24] device_remove+0x12a/0x180 [ 211.015919][ T24] device_release_driver_internal+0x44e/0x620 [ 211.015939][ T24] bus_remove_device+0x2bc/0x560 [ 211.015959][ T24] ? __pfx_bus_remove_device+0x10/0x10 [ 211.015974][ T24] ? __pfx_device_remove_attrs+0x10/0x10 [ 211.015995][ T24] device_del+0x376/0x9b0 [ 211.016015][ T24] ? __pfx_device_del+0x10/0x10 [ 211.016030][ T24] ? __pfx___pm_runtime_barrier+0x10/0x10 [ 211.016053][ T24] usb_disable_device+0x367/0x810 [ 211.016067][ T24] ? mark_held_locks+0x40/0x70 [ 211.016093][ T24] usb_disconnect+0x2e2/0x9a0 [ 211.016114][ T24] hub_event+0x1c4f/0x4a60 [ 211.016138][ T24] ? __lock_acquire+0x49f/0x1a40 [ 211.016162][ T24] ? lockdep_hardirqs_on+0x78/0x100 [ 211.016184][ T24] ? __pfx_hub_event+0x10/0x10 [ 211.016206][ T24] process_one_work+0xa23/0x1940 [ 211.016231][ T24] ? __pfx_process_one_work+0x10/0x10 [ 211.016258][ T24] ? __pfx_hub_event+0x10/0x10 [ 211.016279][ T24] worker_thread+0x5ef/0xe50 [ 211.016300][ T24] ? kthread+0x13a/0x450 [ 211.016320][ T24] ? __pfx_worker_thread+0x10/0x10 [ 211.016622][ T24] kthread+0x370/0x450 [ 211.016646][ T24] ? __pfx_kthread+0x10/0x10 [ 211.016668][ T24] ret_from_fork+0x72b/0xd50 [ 211.016685][ T24] ? __pfx_ret_from_fork+0x10/0x10 [ 211.016704][ T24] ? __switch_to+0x800/0x10f0 [ 211.016722][ T24] ? __pfx_kthread+0x10/0x10 [ 211.016745][ T24] ret_from_fork_asm+0x1a/0x30 [ 211.016770][ T24] [ 211.016775][ T24] [ 211.105184][ T24] Allocated by task 5878: [ 211.106574][ T24] kasan_save_stack+0x30/0x50 [ 211.108085][ T24] kasan_save_track+0x14/0x30 [ 211.109574][ T24] __kasan_kmalloc+0xaa/0xb0 [ 211.111067][ T24] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 211.112782][ T24] snd_ump_endpoint_new+0x93/0x470 [ 211.114417][ T24] create_midi2_ump+0x2dd/0x920 [ 211.115968][ T24] snd_usb_midi_v2_create+0x11fa/0x4070 [ 211.117720][ T24] snd_usb_create_stream.isra.0+0x386/0x4d0 [ 211.119587][ T24] usb_audio_probe+0xf05/0x3b10 [ 211.121173][ T24] usb_probe_interface+0x303/0x8f0 [ 211.122827][ T24] really_probe+0x241/0xa60 [ 211.124287][ T24] __driver_probe_device+0x20e/0x450 [ 211.125966][ T24] driver_probe_device+0x4a/0x140 [ 211.127553][ T24] __device_attach_driver+0x1df/0x320 [ 211.129255][ T24] bus_for_each_drv+0x159/0x1e0 [ 211.130820][ T24] __device_attach+0x1e4/0x4d0 [ 211.132352][ T24] device_initial_probe+0xaf/0xd0 [ 211.133966][ T24] bus_probe_device+0x64/0x160 [ 211.135485][ T24] device_add+0x121d/0x1970 [ 211.136940][ T24] usb_set_configuration+0xd97/0x1c60 [ 211.138634][ T24] usb_generic_driver_probe+0xa1/0xe0 [ 211.140326][ T24] usb_probe_device+0xef/0x400 [ 211.141895][ T24] really_probe+0x241/0xa60 [ 211.143343][ T24] __driver_probe_device+0x20e/0x450 [ 211.145024][ T24] driver_probe_device+0x4a/0x140 [ 211.146625][ T24] __device_attach_driver+0x1df/0x320 [ 211.148313][ T24] bus_for_each_drv+0x159/0x1e0 [ 211.149869][ T24] __device_attach+0x1e4/0x4d0 [ 211.151419][ T24] device_initial_probe+0xaf/0xd0 [ 211.153014][ T24] bus_probe_device+0x64/0x160 [ 211.154537][ T24] device_add+0x121d/0x1970 [ 211.155990][ T24] usb_new_device.cold+0x685/0x115c [ 211.157606][ T24] hub_event+0x30a3/0x4a60 [ 211.158971][ T24] process_one_work+0xa23/0x1940 [ 211.160506][ T24] worker_thread+0x5ef/0xe50 [ 211.162020][ T24] kthread+0x370/0x450 [ 211.163328][ T24] ret_from_fork+0x72b/0xd50 [ 211.164806][ T24] ret_from_fork_asm+0x1a/0x30 [ 211.166294][ T24] [ 211.167039][ T24] Freed by task 24: [ 211.168216][ T24] kasan_save_stack+0x30/0x50 [ 211.169726][ T24] kasan_save_track+0x14/0x30 [ 211.171237][ T24] kasan_save_free_info+0x3b/0x70 [ 211.172823][ T24] __kasan_slab_free+0x5f/0x80 [ 211.174354][ T24] kfree+0x22b/0x6c0 [ 211.175601][ T24] snd_rawmidi_dev_free+0x3e/0x60 [ 211.177186][ T24] __snd_device_free+0x1a3/0x300 [ 211.178768][ T24] snd_device_free_all+0xf3/0x220 [ 211.180368][ T24] release_card_device+0x77/0x1a0 [ 211.181988][ T24] device_release+0xd2/0x270 [ 211.183455][ T24] kobject_put+0x1f7/0x640 [ 211.184879][ T24] put_device+0x1f/0x30 [ 211.186209][ T24] snd_card_free_when_closed+0x2b/0x40 [ 211.187914][ T24] usb_audio_disconnect+0x210/0x680 [ 211.189562][ T24] usb_unbind_interface+0x1dd/0x9e0 [ 211.191231][ T24] device_remove+0x12a/0x180 [ 211.192700][ T24] device_release_driver_internal+0x44e/0x620 [ 211.194624][ T24] bus_remove_device+0x2bc/0x560 [ 211.196205][ T24] device_del+0x376/0x9b0 [ 211.197583][ T24] usb_disable_device+0x367/0x810 [ 211.199189][ T24] usb_disconnect+0x2e2/0x9a0 [ 211.200694][ T24] hub_event+0x1c4f/0x4a60 [ 211.202162][ T24] process_one_work+0xa23/0x1940 [ 211.203748][ T24] worker_thread+0x5ef/0xe50 [ 211.205227][ T24] kthread+0x370/0x450 [ 211.206549][ T24] ret_from_fork+0x72b/0xd50 [ 211.208030][ T24] ret_from_fork_asm+0x1a/0x30 [ 211.209556][ T24] [ 211.210369][ T24] The buggy address belongs to the object at ffff888070d64000 [ 211.210369][ T24] which belongs to the cache kmalloc-4k of size 4096 [ 211.214747][ T24] The buggy address is located 848 bytes inside of [ 211.214747][ T24] freed 4096-byte region [ffff888070d64000, ffff888070d65000) [ 211.219002][ T24] [ 211.219773][ T24] The buggy address belongs to the physical page: [ 211.221814][ T24] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x70d60 [ 211.224542][ T24] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 211.227176][ T24] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 211.229558][ T24] page_type: f5(slab) [ 211.230867][ T24] raw: 04fff00000000040 ffff88801bc43040 dead000000000100 dead000000000122 [ 211.233570][ T24] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 211.236209][ T24] head: 04fff00000000040 ffff88801bc43040 dead000000000100 dead000000000122 [ 211.238944][ T24] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 211.241683][ T24] head: 04fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 211.244392][ T24] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 211.247193][ T24] page dumped because: kasan: bad access detected [ 211.249196][ T24] page_owner tracks the page as allocated [ 211.250999][ T24] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7557, tgid 7556 (syz.2.505), ts 148149438197, free_ts 147977244287 [ 211.257247][ T24] post_alloc_hook+0xfd/0x120 [ 211.258749][ T24] get_page_from_freelist+0xf48/0x3530 [ 211.260470][ T24] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 211.262375][ T24] new_slab+0xa2/0x640 [ 211.263685][ T24] refill_objects+0xe3/0x410 [ 211.265162][ T24] __pcs_replace_empty_main+0x376/0x680 [ 211.266912][ T24] __kmalloc_noprof+0x66d/0x820 [ 211.268423][ T24] tomoyo_realpath_from_path+0xb6/0x690 [ 211.270149][ T24] tomoyo_path_number_perm+0x23c/0x580 [ 211.271901][ T24] security_file_ioctl_compat+0xd3/0x230 [ 211.273675][ T24] __ia32_compat_sys_ioctl+0xc2/0x360 [ 211.275381][ T24] __do_fast_syscall_32+0xe7/0x970 [ 211.277009][ T24] do_fast_syscall_32+0x32/0x70 [ 211.278575][ T24] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 211.280562][ T24] page last free pid 5441 tgid 5441 stack trace: [ 211.282565][ T24] __free_frozen_pages+0x79f/0x1090 [ 211.284225][ T24] qlist_free_all+0x47/0xf0 [ 211.285676][ T24] kasan_quarantine_reduce+0x1a0/0x1f0 [ 211.287393][ T24] __kasan_slab_alloc+0x69/0x90 [ 211.288941][ T24] kmem_cache_alloc_node_noprof+0x27d/0x6b0 [ 211.290822][ T24] __alloc_skb+0x140/0x710 [ 211.292256][ T24] alloc_skb_with_frags+0xdd/0x760 [ 211.293896][ T24] sock_alloc_send_pskb+0x801/0x980 [ 211.295541][ T24] unix_dgram_sendmsg+0x3c7/0x1810 [ 211.297389][ T24] unix_seqpacket_sendmsg+0x12a/0x1d0 [ 211.299127][ T24] sock_write_iter+0x53a/0x5b0 [ 211.300655][ T24] do_iter_readv_writev+0x6f7/0x930 [ 211.302348][ T24] vfs_writev+0x360/0xdd0 [ 211.303753][ T24] do_writev+0x28a/0x340 [ 211.305113][ T24] do_syscall_64+0x115/0x840 [ 211.306595][ T24] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.308452][ T24] [ 211.309233][ T24] Memory state around the buggy address: [ 211.311012][ T24] ffff888070d64200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 211.313518][ T24] ffff888070d64280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 211.316021][ T24] >ffff888070d64300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 211.318511][ T24] ^ [ 211.320568][ T24] ffff888070d64380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 211.323064][ T24] ffff888070d64400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 211.325680][ T24] ================================================================== [ 211.353070][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 211.376163][ T8519] nd_pmem pfn0.0: probe with driver nd_pmem failed with error -16 [ 211.382629][ T24] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 211.384921][ T24] CPU: 2 UID: 0 PID: 24 Comm: kworker/2:0 Not tainted syzkaller #0 PREEMPT(full) [ 211.387765][ T24] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 211.391125][ T24] Workqueue: usb_hub_wq hub_event [ 211.392747][ T24] Call Trace: [ 211.393797][ T24] [ 211.394707][ T24] dump_stack_lvl+0x100/0x190 [ 211.396211][ T24] vpanic+0x552/0x970 [ 211.397492][ T24] ? __pfx_vpanic+0x10/0x10 [ 211.398950][ T24] ? mark_held_locks+0x40/0x70 [ 211.400491][ T24] ? snd_usb_midi_v2_free+0x52d/0x670 [ 211.402248][ T24] panic+0xd1/0xe0 [ 211.403451][ T24] ? __pfx_panic+0x10/0x10 [ 211.404887][ T24] ? snd_usb_midi_v2_free+0x52d/0x670 [ 211.406598][ T24] ? preempt_schedule_common+0x42/0xc0 [ 211.408330][ T24] check_panic_on_warn.cold+0x19/0x34 [ 211.410045][ T24] end_report.part.0+0x3a/0x90 [ 211.411614][ T24] kasan_report.cold+0xe/0x18 [ 211.413134][ T24] ? snd_usb_midi_v2_free+0x52d/0x670 [ 211.414846][ T24] snd_usb_midi_v2_free+0x52d/0x670 [ 211.416495][ T24] ? __pfx_snd_ctl_dev_free+0x10/0x10 [ 211.418199][ T24] snd_usb_midi_v2_free_all+0x85/0xe0 [ 211.419897][ T24] snd_usb_audio_free+0x4e/0x120 [ 211.421516][ T24] ? __pfx_snd_usb_audio_free+0x10/0x10 [ 211.423271][ T24] release_card_device+0xb2/0x1a0 [ 211.424883][ T24] ? __pfx_release_card_device+0x10/0x10 [ 211.426797][ T24] device_release+0xd2/0x270 [ 211.428295][ T24] kobject_put+0x1f7/0x640 [ 211.429730][ T24] ? snd_card_disconnect.part.0+0x443/0x5b0 [ 211.431658][ T24] put_device+0x1f/0x30 [ 211.433001][ T24] snd_card_free_when_closed+0x2b/0x40 [ 211.434716][ T24] usb_audio_disconnect+0x210/0x680 [ 211.436400][ T24] usb_unbind_interface+0x1dd/0x9e0 [ 211.438069][ T24] ? __pfx_usb_unbind_interface+0x10/0x10 [ 211.439865][ T24] device_remove+0x12a/0x180 [ 211.441366][ T24] device_release_driver_internal+0x44e/0x620 [ 211.443294][ T24] bus_remove_device+0x2bc/0x560 [ 211.444875][ T24] ? __pfx_bus_remove_device+0x10/0x10 [ 211.446595][ T24] ? __pfx_device_remove_attrs+0x10/0x10 [ 211.448365][ T24] device_del+0x376/0x9b0 [ 211.449755][ T24] ? __pfx_device_del+0x10/0x10 [ 211.451309][ T24] ? __pfx___pm_runtime_barrier+0x10/0x10 [ 211.453117][ T24] usb_disable_device+0x367/0x810 [ 211.454828][ T24] ? mark_held_locks+0x40/0x70 [ 211.456356][ T24] usb_disconnect+0x2e2/0x9a0 [ 211.457867][ T24] hub_event+0x1c4f/0x4a60 [ 211.459296][ T24] ? __lock_acquire+0x49f/0x1a40 [ 211.460892][ T24] ? lockdep_hardirqs_on+0x78/0x100 [ 211.462562][ T24] ? __pfx_hub_event+0x10/0x10 [ 211.464102][ T24] process_one_work+0xa23/0x1940 [ 211.465685][ T24] ? __pfx_process_one_work+0x10/0x10 [ 211.467383][ T24] ? __pfx_hub_event+0x10/0x10 [ 211.468950][ T24] worker_thread+0x5ef/0xe50 [ 211.470442][ T24] ? kthread+0x13a/0x450 [ 211.471854][ T24] ? __pfx_worker_thread+0x10/0x10 [ 211.473475][ T24] kthread+0x370/0x450 [ 211.474792][ T24] ? __pfx_kthread+0x10/0x10 [ 211.476267][ T24] ret_from_fork+0x72b/0xd50 [ 211.477736][ T24] ? __pfx_ret_from_fork+0x10/0x10 [ 211.479371][ T24] ? __switch_to+0x800/0x10f0 [ 211.480802][ T24] ? __pfx_kthread+0x10/0x10 [ 211.482221][ T24] ret_from_fork_asm+0x1a/0x30 [ 211.483697][ T24] [ 211.485218][ T24] Kernel Offset: disabled [ 211.486623][ T24] Rebooting in 86400 seconds.. VM DIAGNOSIS: 19:07:05 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000007 RBX=1ffff92000616ec6 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff8e17c819 RDI=ffff8880293d2a04 RBP=0000000000000000 RSP=ffffc900030b7630 R8 =0000000000000001 R9 =00000000000000b2 R10=0000000000000200 R11=0000000000000000 R12=ffffffff8be15720 R13=0000000000000143 R14=ffff8880293d2540 R15=0000000000000000 RIP=ffffffff81d519cf RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f4f3a0a2c80 ffffffff 00c00000 GS =0000 ffff888096bf4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f4f3a339008 CR3=000000006f3e1000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4f3a0a2f60 00007f4f3a0a2f60 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00010001010100ff ffffffffffffffff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000000a 00007f4f3a110cc8 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000002e 322e325f4342494c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4c4700362e322e32 5f4342494c470035 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4f3a1106b0 00007f4f3a1100c0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4f3a40eab0 00007f4f3a40e580 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4f3a40db20 00007f4f3a40e050 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000006 RCX=ffffffff81b51eaa RDX=ffff88801c34a540 RSI=ffffffff81b51ece RDI=ffff88801c34a540 RBP=0000000000000001 RSP=ffffc9000046fdf8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008dfc4 R15=0000000000000000 RIP=ffffffff81b51ecf RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096cf4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa5f6512e9c CR3=000000000e994000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=dffffc0000000000 RBX=ffffffff8e173f35 RCX=ffffffff81cf1d20 RDX=ffffffff9b6fcc5c RSI=ffffffff9b6fcc3d RDI=ffffffff8e173f35 RBP=ffffc9000051ef30 RSP=ffffc9000051ee38 R8 =ffffffffffff0a00 R9 =000000000000002f R10=0000000000000018 R11=000000000000cf23 R12=0000000000000006 R13=0000000000000020 R14=ffffc9000051f298 R15=ffffc9000051f220 RIP=ffffffff8bb50c80 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096df4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000080002d40 CR3=0000000072112000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=000000000000003f Opmask02=00000000fffdffbf Opmask03=0000000002082001 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055693f5573d0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f76b5ff1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f76b5ff1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffff000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff0000ff000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000ff00 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 001605121f007343 1e161e035c18101c ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1f115c435d431610 120300161e121d5c ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 34647261632f646e 756f732f302e313a 312d352f312d352f 356273752f302e64 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 383229332f000812 190a19092f2e2e00 2a3f10130e081213 1f00191b121d141f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 356273752f302e64 63685f796d6d7564 2f6d726f6674616c 702f736563697665 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055693f55c280 000055693f559840 000055693f55ce40 000055693f54e600 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055693f55c2c0 000055693f573460 000055693f56a320 000055693f576ae0 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055693f5618d0 000055693f563ed0 000055693f564540 000055693f55a4a0 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055693f56da10 000055693f55c510 000055693f5681d0 000055693f5758e0 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000006 RCX=ffffffff81b51eaa RDX=ffff88801c3fa540 RSI=ffffffff81b51ece RDI=ffff88801c3fa540 RBP=0000000000000003 RSP=ffffc9000048fdf8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000091fc4 R15=0000000000000000 RIP=ffffffff81b51ecf RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096ef4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f546aff4 CR3=000000000e994000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000